You are on page 1of 1007

Acunetix Website Audit 21 June, 2012

Detailed Scan Report

Generated by Acunetix WVS Reporter (v6.0 Build 20081124)

Scan of http://www.advantagepoint.org:80/
Scan details
Scan information Starttime Finish time Scan time Profile Server information Responsive Server banner Server OS Server technologies Threat level

6/21/2012 12:15:22 AM 6/21/2012 2:51:10 PM 14 hours, 35 minutes default

True Microsoft-IIS/6.0 Windows ASP,ASP.NET,PHP,Perl,mod_ssl,mod_perl,mod_python,OpenSSL,FrontPage,JRun,Ruby

Acunetix Threat Level 3 One or more high-severity type vulnerabilities have been discovered by the scanner. A malicious user can exploit these vulnerabilities and compromise the backend database and/or deface your website.
Alerts distribution Total alerts found High Medium Low Informational 1964 1000 0 919 45

Knowledge base
List of open TCP ports There are 4 open TCP ports on the remote host.
Port 21 - [ftp] is open.

Port 25 - [smtp] is open.

Port 80 - [http] is open. Port banner: HTTP/1.1 400 Bad RequestType: text/html: Thu, 21 Jun 2012 06:17:21 GMT: closeLength: 39 <h1>Bad Request (Invalid Hostname)</h1>

Port 443 - [https] is open.

Whois lookup Whois result for IP address 66.241.70.10:


% This is the RIPE Database query service.

Acunetix Website Audit

% The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See http://www.ripe.net/db/support/db-terms-conditions.pdf

ASP-NET ASP-NET Version: 2.0.50727 ASP-NET


ASP-NET Version: 2.0.50727

List of client scripts These files contain Javascript code referenced from the website.

/js/jslib.js /js/datavalidation.js /js/reminderscript.asp

List of files with inputs These files have at least one input (GET or POST).

/searchresults.asp - 13 inputs /page.asp - 4 inputs /formpage.asp - 25 inputs /contactus.asp - 3 inputs /sitemap.asp - 3 inputs /search.asp - 3 inputs /hitandgo.asp - 2 inputs /calendar.asp - 10 inputs /disclaimer.asp - 3 inputs /sectionindex.asp - 1 inputs /contactsendmail.asp - 13 inputs

List of external hosts These hosts were linked from this website but they were not scanned because they are not listed in the list of hosts allowed.(Settings->Scanners settings->Scanner->List of hosts allowed).

www.centertrac.com tbe.taleo.net www.internetmarketinggroup.com www.projecta.com

Alerts summary
SQL injection Affects /formpage.asp Application error message Affects /page.asp /searchresults.asp Variations 40 879 Variations 1000

Acunetix Website Audit

Email address found Affects /calendar.asp /contactus.asp /disclaimer.asp /formpage.asp /page.asp /search.asp /searchresults.asp /sitecredits.asp /sitemap.asp GHDB: robots.txt file Affects /robots.txt GHDB: robots.txt with Disallow tag Affects /robots.txt Password type input with autocomplete enabled Affects / /index.asp Variations 1 1 Variations 1 Variations 1 Variations 15 4 2 2 8 2 5 1 2

Acunetix Website Audit

Alert details
SQL injection
Severity High Type Validation Reported by module Parameter manipulation Description
This script is possibly vulnerable to SQL Injection attacks. SQL injection is a vulnerability that allows an attacker to alter backend SQL statements by manipulating the user input. An SQL injection occurs when web applications accept user input that is directly placed into a SQL statement and doesn't properly filter out dangerous characters. This is one of the most common application layer attacks currently being used on the Internet. Despite the fact that it is relatively easy to protect against, there is a large number of web applications vulnerable.

Impact
An attacker may execute arbitrary SQL statements on the vulnerable system. This may compromise the integrity of your database and/or expose sensitive information. Depending on the back-end database in use, SQL injection vulnerabilities lead to varying levels of data/system access for the attacker. It may be possible to not only manipulate existing queries, but to UNION in arbitrary data, use subselects, or append additional queries. In some cases, it may be possible to read in or write out to files, or to execute shell commands on the underlying operating system. Certain SQL Servers such as Microsoft SQL Server contain stored and extended procedures (database server functions). If an attacker can obtain access to these procedures it may be possible to compromise the entire machine.

Recommendation
Your script should filter metacharacters from user input. Check detailed information for more information about fixing this vulnerability.

Detailed information
Quote from SQL Injection Attack s by Example - http://www.unixwiz.net/techtips/sql-injection.html

SQL injection mitigations


We believe that web application developers often simply do not think about "surprise inputs", but security people do (including the bad guys), so there are three broad approaches that can be applied here.

Sanitize the input


It's absolutely vital to sanitize user inputs to insure that they do not contain dangerous codes, whether to the SQL server or to HTML itself. One's first idea is to strip out "bad stuff", such as quotes or semicolons or escapes, but this is a misguided attempt. Though it's easy to point out some dangerous characters, it's harder to point to all of them. The language of the web is full of special characters and strange markup (including alternate ways of representing the same characters), and efforts to authoritatively identify all "bad stuff" are unlikely to be successful. Instead, rather than "remove known bad data", it's better to "remove everything but known good data": this distinction is crucial. Since - in our example - an email address can contain only these characters:

abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ 0123456789 @.-_+

Acunetix Website Audit

There is really no benefit in allowing characters that could not be valid, and rejecting them early - presumably with an error message - not only helps forestall SQL Injection, but also catches mere typos early rather than stores them into the database. Be aware that "sanitizing the input" doesn't mean merely "remove the quotes", because even "regular" characters can be troublesome. In an example where an integer ID value is being compared against the user input (say, a numeric PIN):

SELECT fieldlist FROM table WHERE id = 23 OR 1=1;

-- Boom! Always matches!

In practice, however, this approach is highly limited because there are so few fields for which it's possible to outright exclude many of the dangerous characters. For "dates" or "email addresses" or "integers" it may have merit, but for any kind of real application, one simply cannot avoid the other mitigations.

Escape/Quotesafe the input


Even if one might be able to sanitize a phone number or email address, one cannot take this approach with a "name" field lest one wishes to exclude the likes of Bill O'Reilly from one's application: a quote is simply a valid character for this field. One includes an actual single quote in an SQL string by putting two of them together, so this suggests the obvious - but wrong! - technique of preprocessing every string to replicate the single quotes:

SELECT fieldlist FROM customers WHERE name = 'Bill O''Reilly';

-- works OK

However, this naive approach can be beaten because most databases support other string escape mechanisms. MySQL, for instance, also permits \' to escape a quote, so after input of \'; DROP TABLE users; -- is "protected" by doubling the quotes, we get:

SELECT fieldlist FROM customers WHERE name = '\''; DROP TABLE users; --';

-- Boom!

The expression '\'' is a complete string (containing just one single quote), and the usual SQL shenanigans follow. It doesn't stop with backslashes either: there is Unicode, other encodings, and parsing oddities all hiding in the weeds to trip up the application designer. Getting quotes right is notoriously difficult, which is why many database interface languages provide a function that does it for you. When the same internal code is used for "string quoting" and "string parsing", it's much more likely that the process will be done properly and safely. Some examples are the MySQL function mysql_real_escape_string() and perl DBD method $dbh->quote($value) . These methods must be used.

Use bound parameters (the PREPARE statement)


Though quotesafing is a good mechanism, we're still in the area of "considering user input as SQL", and a much better approach exists: bound parameters, which are supported by essentially all database programming interfaces. In this technique, an SQL statement string is created with placeholders - a question mark for each parameter - and it's compiled ("prepared", in SQL parlance) into an internal form. Later, this prepared query is "executed" with a list of parameters: Example in perl $sth = $dbh->prepare("SELECT email, userid FROM members WHERE email = ?;"); $sth->execute($email);

Acunetix Website Audit

Thanks to Stefan Wagner, this demonstrates bound parameters in Java: Insecure version Statement s = connection.createStatement(); ResultSet rs = s.executeQuery("SELECT email FROM member WHERE name = " + formField); // *boom*

Secure version PreparedStatement ps = connection.prepareStatement( "SELECT email FROM member WHERE name = ?"); ps.setString(1, formField); ResultSet rs = ps.executeQuery();

Here, $email is the data obtained from the user's form, and it is passed as positional parameter #1 (the first question mark), and at no point do the contents of this variable have anything to do with SQL statement parsing. Quotes, semicolons, backslashes, SQL comment notation - none of this has any impact, because it's "just data". There simply is nothing to subvert, so the application is be largely immune to SQL injection attacks. There also may be some performance benefits if this prepared query is reused multiple times (it only has to be parsed once), but this is minor compared to the enormous security benefits. This is probably the single most important step one can take to secure a web application.

Limit database permissions and segregate users


In the case at hand, we observed just two interactions that are made not in the context of a logged-in user: "log in" and "send me password". The web application ought to use a database connection with the most limited rights possible: queryonly access to the members table, and no access to any other table. The effect here is that even a "successful" SQL injection attack is going to have much more limited success. Here, we'd not have been able to do the UPDATE request that ultimately granted us access, so we'd have had to resort to other avenues. Once the web application determined that a set of valid credentials had been passed via the login form, it would then switch that session to a database connection with more rights. It should go almost without saying that sa rights should never be used for any web-based application.

Use stored procedures for database access


When the database server supports them, use stored procedures for performing access on the application's behalf, which can eliminate SQL entirely (assuming the stored procedures themselves are written properly). By encapsulating the rules for a certain action - query, update, delete, etc. - into a single procedure, it can be tested and documented on a standalone basis and business rules enforced (for instance, the "add new order" procedure might reject that order if the customer were over his credit limit). For simple queries this might be only a minor benefit, but as the operations become more complicated (or are used in more than one place), having a single definition for the operation means it's going to be more robust and easier to maintain. Note: it's always possible to write a stored procedure that itself constructs a query dynamically: this provides no protection against SQL Injection - it's only proper binding with prepare/execute or direct SQL statements with bound variables that provide this protection.

Isolate the webserver


Even having taken all these mitigation steps, it's nevertheless still possible to miss something and leave the server open to compromise. One ought to design the network infrastructure to assume that the bad guy will have full administrator access to the machine, and then attempt to limit how that can be leveraged to compromise other things. For instance, putting the machine in a DMZ with extremely limited pinholes "inside" the network means that even getting complete control of the webserver doesn't automatically grant full access to everything else. This won't stop everything, of

Acunetix Website Audit

course, but it makes it a lot harder.

Configure error reporting


The default error reporting for some frameworks includes developer debugging information, and this cannot be shown to outside users. Imagine how much easier a time it makes for an attacker if the full query is shown, pointing to the syntax error involved. This information is useful to developers, but it should be restricted - if possible - to just internal users.

Affected items /formpage.asp Details The POST variable Address has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DDFNLOIBNABIEAJDKCPGLDNJ; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix Website Audit 8

Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EDFNLOIBJFACKNNNHIFGOGGM; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 818 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CDFNLOIBLMIIHFNAFHEBLKJM; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded Acunetix Website Audit 9

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ADFNLOIBNNALHHODGOLMGPFN; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BDFNLOIBJLBEGICBNMBINCLN; path=/ Cache-control: private

Acunetix Website Audit

10

/formpage.asp Details The POST variable Address has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IDFNLOIBMPCGCBIOEOPGHFEA; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 11

Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JDFNLOIBKBNFBJMABHEFFEHJ; path=/ /formpage.asp Details The POST variable Address has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HDFNLOIBMKAOAOLPNDHGBFCP; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam Acunetix Website Audit 12

e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FDFNLOIBBMCJODGLJNEDOJEF; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GDFNLOIBFNBAAHBPPCDFDMAD; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 13

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LFDNLOIBEJBLMNAAEGHNBNAK; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GFDNLOIBKPGAONIEBLLILEPN; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to JyI%3D . Request Acunetix Website Audit 14

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MFDNLOIBDGLGMPCNNBGGAKLN; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 15

Set-Cookie: ASPSESSIONIDCCSSQBCR=OFDNLOIBCDABJKLHJADEDMAA; path=/ /formpage.asp Details The POST variable Address has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NFDNLOIBECONIFKACMLPFIBE; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 16

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AFDNLOIBAIJPAAFIMIKCPLND; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OEDNLOIBELJPJCJDAJFLBAGG; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 17

...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BFDNLOIBIKOMCFELPLJNOOIL; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FFDNLOIBJKLAJJPDNBOAAKMJ; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Acunetix Website Audit 18

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CFDNLOIBCKEMKEAICOMCKFGK; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 820 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GGCNLOIBDNFHKIAKDOJGANOP; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to %00' . Acunetix Website Audit 19

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IGCNLOIBLOGAGGNACOJLLLMM; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 815 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 20

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FGCNLOIBFDJNLEIPPNDMBKKN; path=/ /formpage.asp Details The POST variable Address has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NGCNLOIBGACIDEAFKGMKLLAI; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 21

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PGCNLOIBHNOOLAKNFJNHGGCC; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 815 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BHCNLOIBLJGBJBKPIBEMLIGL; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 22

(line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OGCNLOIBBKCIOIPNGMJKOCHP; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MGCNLOIBHEDCDKLBIOFOBMMN; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 23

Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KGCNLOIBEBFDOCICDMMCBEBL; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LGCNLOIBDDGMCCKAEBMLMHNB; path=/ Cache-control: private

Acunetix Website Audit

24

/formpage.asp Details The POST variable Address has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CEENLOIBJIGHJBEAKKHIJKPL; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 815 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 25

Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BEENLOIBEOMPBPJDMNEKEBMK; path=/ /formpage.asp Details The POST variable Address has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 817 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AEENLOIBHOAEMFKJOLPNOBEP; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 818 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 Acunetix Website Audit 26

933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MDENLOIBMJIONOEFLEDJKOEK; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ODENLOIBKPDDFIAKLLCONEAP; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 819 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 27

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GEENLOIBDPMKBKMAECMHMIKN; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MEENLOIBHDEOFMHBAFMCAGJJ; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to %2527 . Request Acunetix Website Audit 28

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 817 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FEENLOIBJEGBEGOFKJNJPLIB; path=/ Cache-control: private /formpage.asp Details The POST variable Address has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 815 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 29

Set-Cookie: ASPSESSIONIDCCSSQBCR=DEENLOIBHCPKPOKGPJDIFDKJ; path=/ /formpage.asp Details The POST variable Address has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EEENLOIBKPGNAOLMHPDEIIFE; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=\' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 30

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CAENLOIBFPLCGNMBOFEFLBEG; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=\" &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DAENLOIBJGBGBNAIIFDCODJE; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 31

...ntGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1933 email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2221933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40email %2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=%2527 &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JAENLOIBFPDIBIEINEBCLMEP; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 840 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rdianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1933email @address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-222-1933e mail@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40email%2Ets t&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=acunetix'" &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IAENLOIBMONJHMLEOCFMLHPA; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 836 Acunetix Website Audit 32

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...tGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1933e mail@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-222-1 933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40email% 2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=JyI%3D &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LAENLOIBEFAPANLMDKJOHMHK; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=\" &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KAENLOIBAOBIGPFJGJLMFDNO; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to JyI%3D . Acunetix Website Audit 33

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...es&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2 22-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=1 11-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample% 40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=JyI%3D &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FAENLOIBOGEJAKMJAAMNNOIM; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...entGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-193 3email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-222 -1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40emai l%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=%00' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 34

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EAENLOIBBBOLGIHAMPEFEDMD; path=/ /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=\' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HAENLOIBKEOGDOCKIHBGBEJB; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2221933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40e mail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 35

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GAENLOIBDCBCPDKLDELCLJCO; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...o&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=acunetix'" &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NCCNLOIBBDKONIDJJNPBPIIM; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 36

(line truncated) ...rogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=\' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PCCNLOIBLJODKBLOFGNDJKPJ; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...Program=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNa me=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWor kPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email =sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MCCNLOIBLHDKCGMHJGHCCCEI; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 37

Host: www.advantagepoint.org Content-Length: 839 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...GuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1933em ail@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-222-19 33email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40email%2 Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=acunetix'" &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IBDNLOIBIELBMDKLFJEPOHBB; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...o&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=\' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GBDNLOIBCGEBJEKBLCLCCPLH; path=/ Cache-control: private

Acunetix Website Audit

38

/formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2 22-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=1 11-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample% 40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CDCNLOIBFLEKODHEJOJFBBBD; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=JyI%3D &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 39

Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DDCNLOIBNJIKAMKBOPDNANCD; path=/ /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=\" &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BDCNLOIBNBNNDGJHCLFLENOA; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 826 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= Acunetix Website Audit 40

111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=%252 7&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OCCNLOIBGNLEDCAABELCHELN; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...gram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= 111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=%00' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ADCNLOIBJPLBPFHOLFNFNKPI; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 41

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone= 111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample %40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=%2527 &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OBDNLOIBKJHGOMJDOFEJDGNF; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 826 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111 -222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone =111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sampl e%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=%00' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NBDNLOIBOCBLAFIPCMLNGLLK; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to acunetix'" . Request Acunetix Website Audit 42

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=acunetix'" &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ACDNLOIBKALDGFJPNLHHCFCI; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=\" &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 43

Set-Cookie: ASPSESSIONIDCCSSQBCR=KCCNLOIBDGLAGKAEHJIMGMGO; path=/ /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 838 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...tGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1933e mail@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-222-1 933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40email% 2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=JyI%3D &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LCCNLOIBCHFHIIMAGPBBEKCH; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...o&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=\" &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 44

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JBDNLOIBKNLCFMOJNFCBGEDO; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 833 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2221933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40e mail%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=%00' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HBDNLOIBKDMNNMOJHEEKHIGM; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 45

...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=%2527 &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KBDNLOIBJGGDDNPPCFILMACM; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= 111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MBDNLOIBDKIAMKLLHDMMEMJL; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Acunetix Website Audit 46

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=JyI%3D &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LBDNLOIBLHOMGCLMLEKBKGIO; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=%2527 &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KPENLOIBDCGGLMOEBKADDNLC; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to \" . Acunetix Website Audit 47

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=\" &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JPENLOIBPHADKNKNHOAJILAF; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...m=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=JyI%3D &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 48

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MPENLOIBMIPJCLDAMONMPMOI; path=/ /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2221933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40e mail%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=%00' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NPENLOIBHBOKLNCDFEOGGLNL; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...es&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2 22-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=1 11-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample% 40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 49

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LPENLOIBBBCPDFOGNKGHBLLH; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=acunetix'" &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IPENLOIBCHFMPINJNIEPEBMM; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 50

(line truncated) ...am=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=%2527 &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EPENLOIBHOPEOPFFNHKHGDJG; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= 111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=%00' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FPENLOIBIHEBNAHOLNACHOAI; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 51

Host: www.advantagepoint.org Content-Length: 820 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNa me=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWor kPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email =sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HPENLOIBEMPGAHEIDLHGHJDB; path=/ Cache-control: private /formpage.asp Details The POST variable ApprovalofAdvantagePointLearningasmySESProvider has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=\' &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GPENLOIBNKCNDGAAJIJJGLHD; path=/ Cache-control: private

Acunetix Website Audit

52

/formpage.asp Details The POST variable City has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LHCNLOIBIKKDDMGFHNMNNPCG; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 53

Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IHCNLOIBKAFNKDBONDEADCHO; path=/ /formpage.asp Details The POST variable City has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 817 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MHCNLOIBOPAPAJJOAAGFOAKD; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2 Acunetix Website Audit 54

22-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=1 11-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample% 40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=N o&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AHCNLOIBDPNLHPNLBMFDEMAI; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OHCNLOIBGOAFBBHEDIFNHOIL; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 55

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DHCNLOIBNNFEBMIMHBBLPBFG; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CHCNLOIBJFCCJDFFABKCNCME; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to \' . Request Acunetix Website Audit 56

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 819 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EHCNLOIBNGJCGGMPJGBBNKFB; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 57

Set-Cookie: ASPSESSIONIDCCSSQBCR=GHCNLOIBAFMBOGABENDKBGKF; path=/ /formpage.asp Details The POST variable City has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 819 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FHCNLOIBBALDMMPLHOGABLHL; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 58

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HFDNLOIBFGPMNBHPOHJIKJPK; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PDFNLOIBBKPLLOJFOLIAIMFD; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 59

...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IFDNLOIBOBBGKGOKLMLPIGJE; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AEFNLOIBHOMPKGAIPCONKKPA; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Acunetix Website Audit 60

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KFDNLOIBBOKPEEFHAFIOFKJK; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KDFNLOIBEKJLGJKEHKGOFHDP; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to \' . Acunetix Website Audit 61

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LDFNLOIBCOHNLMGBCIJDFJGO; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 62

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MDFNLOIBHLGLBJNNAMFKOFEP; path=/ /formpage.asp Details The POST variable City has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NDFNLOIBNKACECOAKGEOGHCO; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 63

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ODFNLOIBLMHGDEHKBEMAFDFO; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DGDNLOIBJIBJFCAEIBODBPNO; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 815 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 64

(line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BGDNLOIBKKMFBIOCEHJKMJID; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FGDNLOIBAINMDOJHLMDCDGEP; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 65

Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HGDNLOIBMFIKFKPDJKCDCELJ; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 817 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GGDNLOIBDBDKFKJFNMBBBMCA; path=/ Cache-control: private

Acunetix Website Audit

66

/formpage.asp Details The POST variable City has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 819 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BEFNLOIBGNGIFFMPMLKJPHJM; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 67

Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CEFNLOIBIBAJKNBDDPKCDGHG; path=/ /formpage.asp Details The POST variable City has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DEFNLOIBOKGKAJBHGJHHHDPA; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 818 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 Acunetix Website Audit 68

11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AGDNLOIBIMIKAFMHIJADHAGL; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PFDNLOIBBCKHNCEFADHHHHIN; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 826 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 69

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OEENLOIBFFDACKGANIOKONKO; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NEENLOIBNECPCBBNENCMFELD; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to ' . Request Acunetix Website Audit 70

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 820 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PEENLOIBGCKFNIJPADCOFBOK; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 71

Set-Cookie: ASPSESSIONIDCCSSQBCR=BFENLOIBFGJMAANPEEDLAPBD; path=/ /formpage.asp Details The POST variable City has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AFENLOIBGHCGDAMHBMLGHCLI; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 72

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LEENLOIBIJNCLGABMOFAEOOH; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KEENLOIBCJELKFPHAJPFIOGL; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 73

...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JEENLOIBMPCGFGDMJBLCKFAH; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HEENLOIBNAPKDKCJHCHMJNNE; path=/ Cache-control: private /formpage.asp Details The POST variable City has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Acunetix Website Audit 74

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IEENLOIBCKBCENIFKOOONFIB; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933 email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePoin tLearningasmySESProvider=Yes&ElectronicSignature='&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JFDNLOIBGCCFEEEJGMHCBNIB; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to ' . Acunetix Website Audit 75

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Pare ntGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addre ss.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@a ddress.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePoi ntLearningasmySESProvider=No&ElectronicSignature='&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GCFNLOIBKANNBJFMIJOLOFKJ; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...educedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGua rdianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.ts t&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addres s.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLea rningasmySESProvider=Yes&ElectronicSignature=%2527&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 76

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ICFNLOIBFFBOAKNDJKFHPGII; path=/ /formpage.asp Details The POST variable ElectronicSignature has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email @address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePoin tLearningasmySESProvider=Yes&ElectronicSignature='&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FDCNLOIBLGMLCJHHNCENJOFL; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@addres s.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933e mail@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1 933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePoin tLearningasmySESProvider=No&ElectronicSignature=\"&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 77

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EDCNLOIBAIKEPBAPFHDMAPOB; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email @address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933e mail@address.tst&email=sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLea rningasmySESProvider=No&ElectronicSignature=JyI%3D&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GDCNLOIBCHMGCOJCLKAJANBB; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 78

(line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@add ress.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearning asmySESProvider=Yes&ElectronicSignature=acunetix'"&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JCDNLOIBCFPHMEPMDNLKIDCK; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGu ardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.t st&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addre ss.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLe arningasmySESProvider=No&ElectronicSignature=%2527&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KCFNLOIBHIAGMLPJECOCDDLD; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 79

Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...dLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardian LastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Par entWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst &email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearning asmySESProvider=Yes&ElectronicSignature=acunetix'"&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LCFNLOIBIPEDMILBELFIALHA; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@ad dress.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLe arningasmySESProvider=No&ElectronicSignature=%2527&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PBDNLOIBNFMCKNPNAJALOGPF; path=/ Cache-control: private

Acunetix Website Audit

80

/formpage.asp Details The POST variable ElectronicSignature has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@ad dress.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePoin tLearningasmySESProvider=Yes&ElectronicSignature='&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JCFNLOIBIOBKLECIEODBOCMN; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@add ress.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePoint LearningasmySESProvider=Yes&ElectronicSignature=\'&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 81

Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OCFNLOIBBMLGGAPLEBCNHNFE; path=/ /formpage.asp Details The POST variable ElectronicSignature has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address. tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addr ess.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointL earningasmySESProvider=No&ElectronicSignature=%00'&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PCFNLOIBKAEMNEAJEDNHILBB; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGua Acunetix Website Audit 82

rdianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.ts t&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addres s.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLea rningasmySESProvider=Yes&ElectronicSignature=JyI%3D&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MCFNLOIBPGMFIBIJGADABCPO; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@add ress.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePoint LearningasmySESProvider=Yes&ElectronicSignature=\"&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NCFNLOIBGBFLDEIACAFOKCGK; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 83

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ucedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuar dianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst &ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address .tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearnin gasmySESProvider=No&ElectronicSignature=acunetix'"&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FCDNLOIBIPGDHCBCEGFJIECA; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email @address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePoin tLearningasmySESProvider=No&ElectronicSignature=\'&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ECDNLOIBKLECEBIENCLAOIEC; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to %00' . Request Acunetix Website Audit 84

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ing&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst& ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@a ddress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933ema il@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLe arningasmySESProvider=Yes&ElectronicSignature=%00'&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HCDNLOIBOHEFACNBCKKCCEME; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ad dress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933emai l@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLea rningasmySESProvider=Yes&ElectronicSignature=%2527&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 85

Set-Cookie: ASPSESSIONIDCCSSQBCR=GCDNLOIBDOLIHBJACFJHDDPF; path=/ /formpage.asp Details The POST variable ElectronicSignature has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pare ntGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addre ss.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@a ddress.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointL earningasmySESProvider=No&ElectronicSignature=%00'&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BCDNLOIBCJBGBDCKHPOEDMDF; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGu ardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.t st&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addre ss.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLe arningasmySESProvider=Yes&ElectronicSignature=%00'&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 86

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HCFNLOIBJLAPIBLPLBNJHBBL; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@add ress.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLea rningasmySESProvider=No&ElectronicSignature=JyI%3D&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DCDNLOIBNEMFKGDOPMILMJMC; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 87

...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email @address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePoin tLearningasmySESProvider=No&ElectronicSignature=\"&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CCDNLOIBHKPEILALGEHOOPAN; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...cedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuard ianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst& ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address. tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearning asmySESProvider=Yes&ElectronicSignature=acunetix'"&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JDCNLOIBAIAKJPDONHKIPMEB; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Acunetix Website Audit 88

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Par entGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addr ess.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@ address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePoint LearningasmySESProvider=Yes&ElectronicSignature=\'&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LDCNLOIBGDCAELKIKOJKIGKF; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@add ress.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLea rningasmySESProvider=Yes&ElectronicSignature=%2527&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IDCNLOIBDPNJHIBIDDBLBKPC; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to %00' . Acunetix Website Audit 89

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@ad dress.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLe arningasmySESProvider=Yes&ElectronicSignature=%00'&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HDCNLOIBNGICKACLADNGLOMH; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Par entGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addr ess.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@ address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePoint LearningasmySESProvider=Yes&ElectronicSignature=\"&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 90

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KDCNLOIBKOGBMMDLFCJGOBDN; path=/ /formpage.asp Details The POST variable ElectronicSignature has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address. tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addr ess.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLear ningasmySESProvider=Yes&ElectronicSignature=JyI%3D&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MDCNLOIBAHOAGNFBMDOHDOIE; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ad dress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933emai l@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLea rningasmySESProvider=No&ElectronicSignature=JyI%3D&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 91

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NDENLOIBADBCJJGPDOPDKBGM; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933 email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePoin tLearningasmySESProvider=No&ElectronicSignature=\'&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PDENLOIBGJDNLBEOCCAPOLDG; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 92

(line truncated) ...g&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ad dress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933emai l@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePoi ntLearningasmySESProvider=No&ElectronicSignature='&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NDCNLOIBFLIEFEBPEKCIDEAG; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email @address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933e mail@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePoint LearningasmySESProvider=Yes&ElectronicSignature=\"&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ADENLOIBCMAPDMJPCKELNPEH; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 93

Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst &ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933em ail@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointL earningasmySESProvider=No&ElectronicSignature=%00'&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JDENLOIBCPFDKAKKPAHEOKHA; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ing&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst& ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@a ddress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933ema il@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLe arningasmySESProvider=No&ElectronicSignature=%2527&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IDENLOIBNKAOCBODJIECCKDH; path=/ Cache-control: private

Acunetix Website Audit

94

/formpage.asp Details The POST variable ElectronicSignature has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933 email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePoin tLearningasmySESProvider=No&ElectronicSignature=\"&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LDENLOIBJELHPAOIOKLGIHGJ; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@ad dress.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearnin gasmySESProvider=No&ElectronicSignature=acunetix'"&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 95

Connection: close Date: Thu, 21 Jun 2012 17:32:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KDENLOIBFFMNODPEGNDALCMN; path=/ /formpage.asp Details The POST variable ElectronicSignature has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email @address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933e mail@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePoint LearningasmySESProvider=Yes&ElectronicSignature=\'&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CDENLOIBEPAGIDECBMKPMLDK; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...g&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&P Acunetix Website Audit 96

arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ad dress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933emai l@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLea rningasmySESProvider=Yes&ElectronicSignature=JyI%3D&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DDENLOIBGOPBBOHFGPIDDCDD; path=/ Cache-control: private /formpage.asp Details The POST variable ElectronicSignature has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 798 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address. tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933ema il@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-193 3email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePoi ntLearningasmySESProvider=No&ElectronicSignature='&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HDENLOIBIGMNIDIPEHNEADFO; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 815 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 97

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...edLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardia nLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Pa rentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.ts t&email='&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BNENLOIBLLIEDPILIANDBJIK; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@add ress.tst&email='&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GPCNLOIBDMBGJBCBLCENGPHG; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to %00' . Request Acunetix Website Audit 98

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...dLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardia nLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Pa rentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.ts t&email=%00'&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IPCNLOIBALCAJGMLBEGPPLHG; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 817 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...LunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianL astName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Pare ntWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst& email=\"&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 99

Set-Cookie: ASPSESSIONIDCCSSQBCR=ANENLOIBIIHOAAGCCDLHBKPI; path=/ /formpage.asp Details The POST variable email has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 817 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...LunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianL astName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Pare ntWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst& email=\'&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OMENLOIBHHFFIEINFKAEKHMO; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...hProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastN ame=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWo rkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&emai l=JyI%3D&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 100

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PMENLOIBKDLAGEHBMPAALBIM; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 819 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...nchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLas tName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Parent WorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&em ail=%2527&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DNENLOIBNLMIBLLOKNKAGBJG; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 817 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 101

...LunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardian LastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Par entWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst &email=%2527&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JPCNLOIBHBAPCFAMAAGCLKLC; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...cedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuard ianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst& ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address. tst&email=\"&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OPCNLOIBIOOMAACMKMHCDEIE; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Acunetix Website Audit 102

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...educedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGua rdianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.ts t&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addres s.tst&email=%00'&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PPCNLOIBGKBPJNLOEKHEKPCD; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 817 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...LunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianL astName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Pare ntWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst& email=acunetix'"&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CADNLOIBDKMDFDNMKOFGAPMO; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to JyI%3D . Acunetix Website Audit 103

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 818 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...unchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianL astName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Pare ntWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst& email=JyI%3D&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NPCNLOIBDNOFPOECMDGAHPGA; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...Program=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastN ame=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWo rkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&emai l=acunetix'"&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 104

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KPCNLOIBFGIMJAJJMGJOADNO; path=/ /formpage.asp Details The POST variable email has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...cedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuard ianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst& ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address. tst&email=\'&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LPCNLOIBGLPAFEHEHEOEABEL; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuar dianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst &ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address .tst&email=%2527&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 105

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MPCNLOIBMLOLFOBPBMBCLLKL; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...gram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= 111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=ac unetix'"&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NMENLOIBCGPKEHCFMHBKFMBM; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 818 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 106

(line truncated) ...unchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLa stName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Paren tWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&e mail=%00'&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GNENLOIBLANFNLDIIAHJIJIA; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...educedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGua rdianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.ts t&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addres s.tst&email=%2527&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HODNLOIBKJCAALBLIFDGCHKP; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 107

Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGu ardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.t st&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addre ss.tst&email=%00'&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IODNLOIBOMHPBMHDCEKHKALF; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 819 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...nchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLa stName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Paren tWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&e mail=JyI%3D&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KACNLOIBKGNFHIFMCPJGHDPI; path=/ Cache-control: private

Acunetix Website Audit

108

/formpage.asp Details The POST variable email has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ucedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuar dianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst &ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address .tst&email='&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ABCNLOIBKNCEJEMJNOHLKEPL; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address. tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addr ess.tst&email=\'&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 109

Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CODNLOIBNBKLAHLBHFILIEIO; path=/ /formpage.asp Details The POST variable email has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@add ress.tst&email=\'&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LODNLOIBLEBPECPPDEMEJOGH; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Paren Acunetix Website Audit 110

tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@ad dress.tst&email=\"&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=N o&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NODNLOIBCIEFKDOGGDIOLOAN; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuar dianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst &ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address .tst&email=JyI%3D&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MODNLOIBCGDMPPHDEDGGPLFL; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 111

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ucedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuard ianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst& ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address. tst&email=JyI%3D&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JODNLOIBLKNMHKFNKKHCMLLP; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address. tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addr ess.tst&email=\"&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AODNLOIBGJMDHMJMDOOLFGHE; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to ' . Request Acunetix Website Audit 112

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@ad dress.tst&email='&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EODNLOIBJNCMJMPPAGMMAPIM; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Par entGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addr ess.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@ address.tst&email=\"&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 113

Set-Cookie: ASPSESSIONIDCCSSQBCR=CACNLOIBHPEJIJPBCKBPOMOE; path=/ /formpage.asp Details The POST variable email has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...dLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardian LastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Par entWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst &email=acunetix'"&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KODNLOIBKLOFEFGDFEMDKELG; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address. tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addr ess.tst&email=JyI%3D&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 114

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DACNLOIBFIMMIMCBPOBOIGCM; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 819 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...nchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLas tName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Parent WorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&em ail=%00'&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MMENLOIBMINOKBDONGJPPBBN; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 115

...dLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardian LastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Par entWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst &email='&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KMENLOIBEBGKHEOHMEPBOEHP; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 820 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...chProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLast Name=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentW orkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&ema il=%2527&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IMENLOIBGFMKJOEBPMAOMNOA; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 818 Acunetix Website Audit 116

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...unchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianL astName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Pare ntWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst& email=%2527&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EACNLOIBBKNFNJDMCGNOMDEN; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 815 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...edLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardi anLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&P arentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.t st&email=\"&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HACNLOIBKNBJDGEIJGMEABDF; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to ' . Acunetix Website Audit 117

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...cedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuard ianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst& ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address. tst&email='&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IACNLOIBHJMPAJJGHHOGMCKD; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNa me=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWor kPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email =acunetix'"&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 118

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JACNLOIBNCGFJFPPAMMJBDMJ; path=/ /formpage.asp Details The POST variable email has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 817 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...LunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardian LastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Par entWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst &email=%00'&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FACNLOIBCNBMEFOOPAPKDFCC; path=/ Cache-control: private /formpage.asp Details The POST variable email has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 815 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...edLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardi anLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&P arentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.t st&email=\'&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 119

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GACNLOIBEENLGMJECNMHCEHM; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@addres s.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933e mail@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1 933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePoin tLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction =\"&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ODCNLOIBDIENJCJGNGGDLAEL; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 120

(line truncated) ...g&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ad dress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933emai l@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePoi ntLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormActi Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FECNLOIBOKPKILDBCBJADABH; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Par entGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addr ess.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@ address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePoint LearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction =\'&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EECNLOIBGFJPJFMPPBGNNALI; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 121

Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Par entGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addr ess.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@ address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePoint LearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormActio Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HECNLOIBLCDODPPCKIDANPPL; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address. tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addr ess.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLear ningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction=JyI %3D&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GECNLOIBMNCPKIEDJLKHEFIC; path=/ Cache-control: private

Acunetix Website Audit

122

/formpage.asp Details The POST variable FormAction has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...cedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuard ianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst& ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address. tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearning asmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction=acuneti x'"&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DECNLOIBLAMHGLPLPOKHOBOF; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email @address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933e mail@address.tst&email=sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLea rningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction=JyI %3D&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 123

Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AECNLOIBLBNJGOELOLJLFJND; path=/ /formpage.asp Details The POST variable FormAction has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email @address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePoin tLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormActio n='&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PDCNLOIBHNDLKIFNOFLFILFL; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pare Acunetix Website Audit 124

ntGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addre ss.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@a ddress.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointL earningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CECNLOIBAHCFKIJAEGKMJKCG; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@add ress.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLea rningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction=%2 527&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BECNLOIBOAIGOHICBGNMJADG; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 125

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ad dress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933emai l@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLea rningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction=Jy Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FBENLOIBBAHHBADGEALOEPDE; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 798 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address. tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933ema il@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-193 3email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePoi ntLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormActio n='&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BBENLOIBOOPHDFCIDGKFEPHK; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to %2527 . Request Acunetix Website Audit 126

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ing&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst& ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@a ddress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933ema il@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLe arningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction=%2 527&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DBENLOIBDMHBJOFKCDMBHFOK; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@ad dress.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePoin tLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormActio n='&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 127

Set-Cookie: ASPSESSIONIDCCSSQBCR=PPENLOIBDGLMJHFIAMKGKBPH; path=/ /formpage.asp Details The POST variable FormAction has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGu ardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.t st&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addre ss.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLe arningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction=% 00'&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AAFNLOIBMFCAFIKNDFCNOICD; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...dLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardian LastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Par entWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst &email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearning asmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction=acuneti x'"&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 128

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CAFNLOIBNHNIIHDJJHOENGLB; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@add ress.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePoint LearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction =\"&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BAFNLOIBPMJNAJAELCHOCEBC; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 129

...reeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@ad dress.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearnin gasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction=acunet Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PAENLOIBBEJDOMMAIKDMHECP; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933 email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePoin tLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction =\"&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EBENLOIBDEJPHNBPBBENBPCE; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Acunetix Website Audit 130

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...educedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGua rdianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.ts t&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addres s.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLea rningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction=% Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OPENLOIBMFLDMOOJBHGFMMMG; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email @address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933e mail@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePoint LearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction =\'&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MAENLOIBEJNPODGOPKLCGFIM; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to \" . Acunetix Website Audit 131

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email @address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933e mail@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePoint LearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction =\"&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NAENLOIBHGAMHLHJLBJBLAFA; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933 email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePoin tLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction =\'&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 132

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CBENLOIBIIJMCKBFOCIHHFJP; path=/ /formpage.asp Details The POST variable FormAction has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...g&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email @address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLear ningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction=JyI %3D&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ABENLOIBJLMCDOEGLKGJPNIP; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst &ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933em ail@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointL earningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction=% 00'&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 133

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OAENLOIBFDINJJDJCDGDHNID; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email @address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePoin tLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction =\"&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NCDNLOIBKDGJKEGAAFELFCKG; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 134

(line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933 email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePoin tLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormActi Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OCDNLOIBKLJODAHBDKBFNHNF; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ucedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuar dianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst &ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address .tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearnin gasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction=acuneti x'"&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PCDNLOIBALMAGNPEPDPAOGEE; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 135

Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@add ress.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLea rningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction=Jy Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MCDNLOIBNEBPIPHHPFAOPEDF; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email @address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePoin tLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction =\'&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ICDNLOIBNFAFLIIEGPGDLGMJ; path=/ Cache-control: private

Acunetix Website Audit

136

/formpage.asp Details The POST variable FormAction has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@ad dress.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLe arningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction=%2 527&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KCDNLOIBAAMAMAFGJAOPADFJ; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pare ntGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addre ss.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@a ddress.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointL earningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction=% 00'&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 137

Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LCDNLOIBCKHGMJABOCADJDAD; path=/ /formpage.asp Details The POST variable FormAction has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ad dress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933emai l@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLea rningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction=%2 527&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ADDNLOIBHNNNCEBCDIIBLJOC; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG Acunetix Website Audit 138

uardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address. tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addr ess.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointL earningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction= Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GAFNLOIBIDPEPCFPKDJHFGKA; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuar dianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst &ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address .tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLear ningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction=JyI %3D&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EAFNLOIBGJNLAABICDIOGPPM; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 139

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@add ress.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePoint LearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormActio Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DAFNLOIBCPCOBNMANEMFMLJF; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address. tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@addr ess.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointL earningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormAction=% 00'&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JAFNLOIBACBBDGHIMDFMLOIJ; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to acunetix'" . Request Acunetix Website Audit 140

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@add ress.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearning asmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction=acuneti x'"&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DDDNLOIBADFJHCLENFHFOPNH; path=/ Cache-control: private /formpage.asp Details The POST variable FormAction has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ing&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst& ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@a ddress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933ema il@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLe arningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormAction=% 00'&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 141

Set-Cookie: ASPSESSIONIDCCSSQBCR=BDDNLOIBAMAJOPEOBMNBDEAM; path=/ /formpage.asp Details The POST variable FormAction has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Pare ntGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addre ss.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@a ddress.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePoi ntLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormActio n='&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FAFNLOIBJNNOLDJONHEPEBAK; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...gram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No& ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address.t st&FormID=\'&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 142

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MNENLOIBKNKABIEOGJDPCLCB; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID='&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NNENLOIBKCBLMJDFFKFLPEAF; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 833 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 143

...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No&Electron icSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address.tst&Form Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PNENLOIBEDGHIGAMIMLOAPGP; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No&El ectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address.tst &FormID=%00'&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ONENLOIBKLADJGGCGHLKDMHD; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Acunetix Website Audit 144

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...m=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No&Ele ctronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address.tst Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LNENLOIBEIMLBDNONDOIKIPB; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 836 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No& ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address.t st&FormID=\"&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FCCNLOIBKDLHOLPOCDFJJEKF; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to %00' . Acunetix Website Audit 145

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 838 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ntGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1933 email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2221933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40email %2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No&El ectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address.tst &FormID=%00'&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ECCNLOIBIIJLPCIDIJHGHFOH; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 844 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...dianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1933email@ address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-222-1933em ail@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40email%2Etst &how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No&Electron icSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address.tst&FormI D=acunetix'"&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 146

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DCCNLOIBIHLFFPGEGLBBGPBO; path=/ /formpage.asp Details The POST variable FormID has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111 -222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone =111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sampl e%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes&Ele ctronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address.tst& FormID=%2527&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JCCNLOIBCMGKOIIEBKLKPGCM; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...gram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID='&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 147

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ICCNLOIBNPLKMGGOLBMBAABP; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 836 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No& ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address.t st&FormID=\'&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GCCNLOIBPLFDLIPLNNNJJKCK; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 148

(line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CCCNLOIBAECGCHPAIPGMFEEH; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2221933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40e mail%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes&Electron icSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address.tst&FormI D=acunetix'"&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CNENLOIBEIHBGHLNBIPDFKAJ; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 149

Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...m=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes&El ectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address.ts Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FNENLOIBKHOLEKLLMKCPEGJI; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 826 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= 111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes& ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address.t st&FormID=\"&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JNENLOIBIGCODGBHFCBNKKKM; path=/ Cache-control: private

Acunetix Website Audit

150

/formpage.asp Details The POST variable FormID has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 839 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...tGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1933e mail@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-222-1 933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40email% 2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No&Ele ctronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address.tst& FormID=%2527&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PBCNLOIBDPHKIFOHIIKEKLKN; path=/ Cache-control: private /formpage.asp Details The POST variable FormID has been set to JyI%3D . Request GET /Index.asp HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG;ASPSESSIONIDCCSSQBCR=HCCNLOIBFLNKLFBIACPKL OOO Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 341 Content-Type: text/html Cache-control: private

Acunetix Website Audit

151

/formpage.asp Details The POST variable FormID has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 826 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= 111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes& ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address.t st&FormID=\'&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ENENLOIBPJOBEGILFOHFJFCO; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 152

Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MMBNLOIBJHCLOPFEBGEFCLJO; path=/ /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LMBNLOIBBJOJDLOFONBCLNFN; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 836 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 Acunetix Website Audit 153

2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NMBNLOIBMIKMBIGGGKHBJMHF; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...'&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DNBNLOIBAHOAJDGLGFPHKAMP; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 154

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OMBNLOIBICPKFLIKDCJBBPMJ; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=JyI%3D&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HMBNLOIBEDAKPDCMGPGCIGJM; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \" . Request Acunetix Website Audit 155

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rogram=\"&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GMBNLOIBEGDLACNMGACJJDMH; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 156

Set-Cookie: ASPSESSIONIDCCSSQBCR=IMBNLOIBKHBJNHIGKJPJDIKF; path=/ /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 840 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KMBNLOIBNFJMCBACNGMLFENN; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 157

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JMBNLOIBNGHHLKBFCGOADKLF; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 836 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DJENLOIBAJEAJDKANEPDCEDI; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 158

...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CJENLOIBGPPHCJBPHDJHHNNF; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FJENLOIBDIAFPDMNIOJPEBJC; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 833 Acunetix Website Audit 159

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JJENLOIBCHHPHGGFGLOEBECC; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GJENLOIBKAIPNKOLGECDDEIL; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to ' . Acunetix Website Audit 160

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PIENLOIBLIPFEKJFBDDKAHPN; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 161

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NIENLOIBHJPKKMHAEHKDLEPL; path=/ /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 840 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AJENLOIBPOCCKMEKNGLBODJP; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 162

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EJENLOIBEFDADBAINJJKICEF; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BJENLOIBHPGBCFGECPJLNCIB; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 163

(line truncated) ...ogram=\'&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IIFNLOIBMCGAIKDIAEOBKDMG; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 820 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rogram='&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GIFNLOIBAIMIKMANFHFDKJHA; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 164

Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=%00'&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LIFNLOIBFJCOGGNDNJMMJOHP; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...unetix'"&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MIFNLOIBEHJKOCDANIIPOHOP; path=/ Cache-control: private

Acunetix Website Audit

165

/formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=\"&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KIFNLOIBCBEBKKCMEOIDHPCN; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 166

Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AIFNLOIBCFJAINAFAIFAJDGP; path=/ /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 839 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NHFNLOIBBDBPNPIIODMKGHMK; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222Acunetix Website Audit 167

1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40e mail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=N o&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DIFNLOIBLOCCAJCLLKNKHEKI; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FIFNLOIBOGFPOJPNNLNGKICG; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 168

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=%2527&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EIFNLOIBBAACNMHPHCGGCJDF; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram='&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PLCNLOIBCLGCNAKNNPIPPKEI; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to JyI%3D . Request Acunetix Website Audit 169

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...D&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NLCNLOIBCHGNGLAGGPIHEGMP; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 826 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=%00'&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 170

Set-Cookie: ASPSESSIONIDCCSSQBCR=BMCNLOIBIOCEMGCJIJKIKFGH; path=/ /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...tix'"&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FMCNLOIBMCONFIDEHHBOIHKD; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...%2527&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 171

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CMCNLOIBABPBACMLHAMFONGD; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...'&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JLCNLOIBOFANLFPLLINBOBPF; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 172

...7&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ILCNLOIBIKPLNMCNOJIPDIIE; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 839 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ..."&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LLCNLOIBMNGFGCNOCCMNNFFD; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Acunetix Website Audit 173

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ..."&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OLCNLOIBDGGKICBJMMMPHCIC; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 833 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...'&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MLCNLOIBGOMOPGNFNHMANHIG; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to acunetix'" . Acunetix Website Audit 174

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...etix'"&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MKDNLOIBGDCDEAEEEOFIAAAH; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...yI%3D&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 175

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JKDNLOIBNHAIKKGHCCANECOG; path=/ /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...JyI%3D&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OKDNLOIBDNBGMMLJGBALJNFN; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=\"&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 176

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ALDNLOIBNKJPKGOJMMGHNKNG; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=\'&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NKDNLOIBOBLHDHBKOBJOPGJI; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 177

(line truncated) ...m=%00'&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FKDNLOIBJNINMLHMFJEMIICB; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=\'&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CKDNLOIBMLIAIPMKMNIPPINI; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 178

Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...gram='&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GKDNLOIBCKMFHAIAGOOJMFGE; path=/ Cache-control: private /formpage.asp Details The POST variable FreeReducedLunchProgram has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 826 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=%2527&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LKDNLOIBJPJAHINFILBLNEKE; path=/ Cache-control: private

Acunetix Website Audit

179

/formpage.asp Details The POST variable FreeReducedLunchProgram has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=\"&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IKDNLOIBLHPBLIIDIHDMMDFL; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 180

Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IJDNLOIBKOCFDGBMBMPEBNBG; path=/ /formpage.asp Details The POST variable GradeLevel has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JHFNLOIBOINGBENNNEAMACBK; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= Acunetix Website Audit 181

111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=N o&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JJDNLOIBDLCFCCAHDNGNNNJL; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MJDNLOIBCKFMEIIADDCKJJJK; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 182

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KJDNLOIBDJOBIJIICACKLKDB; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 826 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FJDNLOIBCEGMJEFLAMJLCEJM; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \' . Request Acunetix Website Audit 183

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EJDNLOIBAIIFPCMEMABAGDOP; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 184

Set-Cookie: ASPSESSIONIDCCSSQBCR=FHFNLOIBJOLOFPIOMCLJBBLC; path=/ /formpage.asp Details The POST variable GradeLevel has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HJDNLOIBFNNHOEIJOMFJIDJA; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 185

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GJDNLOIBPIDJMFBLMCDOHKOH; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 837 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FLBNLOIBLIELPHLGPMLEAMGK; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 842 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 186

...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GLBNLOIBNEMOKKHOMPKCIOHN; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 833 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ELBNLOIBFCNBCOHEHKEFBJIL; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Acunetix Website Audit 187

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ALBNLOIBODPCMENLIOADOKLE; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DLBNLOIBKDJCMAFOMFDEIAAH; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \" . Acunetix Website Audit 188

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KLBNLOIBKAKEPPDGPALIPCDP; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 189

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MLBNLOIBILNMAMMNPAILCNPN; path=/ /formpage.asp Details The POST variable GradeLevel has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 838 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ILBNLOIBBBONJLFMLOCLOGIC; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 836 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 190

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HLBNLOIBFIFCJEKFDBKNPFCO; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JLBNLOIBONOIKNKBAGHOHPKD; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 191

(line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LKCNLOIBFBELCENNHAOCNEBO; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 833 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KKCNLOIBLHBAOIDMLMHBHALB; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 192

Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MKCNLOIBBIECPFHLOBMPEKLL; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PKCNLOIBNKIGKMMNJKMHENOC; path=/ Cache-control: private

Acunetix Website Audit

193

/formpage.asp Details The POST variable GradeLevel has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 836 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OKCNLOIBHCFCDBAFHLJCHLII; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 194

Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FKCNLOIBGBACLINLNKIDBAOD; path=/ /formpage.asp Details The POST variable GradeLevel has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 836 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EKCNLOIBDMODHCDJAIOPFCBN; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 841 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2 Acunetix Website Audit 195

22-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=1 11-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample% 40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=N o&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HKCNLOIBMPFCHFIHNAHJPNCJ; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 837 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JKCNLOIBKMHBPNDDNPPJFBDF; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 833 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 196

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IKCNLOIBPALAOJNNJIMCKAHN; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DHFNLOIBDCIDGAHHBGFDNCCI; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to JyI%3D . Request Acunetix Website Audit 197

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 839 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BHFNLOIBFPFPDHLCJPMOMLDD; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 833 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 198

Set-Cookie: ASPSESSIONIDCCSSQBCR=CHFNLOIBKHAGKIJBGCKIKALF; path=/ /formpage.asp Details The POST variable GradeLevel has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CJDNLOIBGJJEPHPCDCHAFFJC; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 199

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BJDNLOIBJGOBLBMBPBALECDJ; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NGFNLOIBLKBNAFHBPBDALGEJ; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 843 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 200

...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KGFNLOIBFKGJCAAJPFEMODEB; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OGFNLOIBGIOKCMLDDLOPOFDK; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Acunetix Website Audit 201

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AHFNLOIBOOLLAIOEEGGJKDCJ; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PGFNLOIBGOKLFFGDNGMFLEBJ; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to %00' . Acunetix Website Audit 202

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 838 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LHENLOIBNGKNEOHGCIFHMJJL; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 203

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BIENLOIBOBIIINPEOGBJLEGB; path=/ /formpage.asp Details The POST variable GradeLevel has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 839 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IHENLOIBALJHKDMADGIEJCIF; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 840 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 204

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JHENLOIBFODHFOOINMFFLCGI; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 844 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KHENLOIBAJKAMKGBJNJDDGGL; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 837 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 205

(line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CIENLOIBMBEFLIMOKBFHNEEO; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 836 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AIENLOIBFFHEPCONHMEBOALF; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 206

Host: www.advantagepoint.org Content-Length: 836 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MHENLOIBLFKHHKFPEKAFHIBI; path=/ Cache-control: private /formpage.asp Details The POST variable GradeLevel has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OHENLOIBNGDJELKOAMHHEIKP; path=/ Cache-control: private

Acunetix Website Audit

207

/formpage.asp Details The POST variable GradeLevel has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 838 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FIENLOIBFJNDMGKEPGEPICAP; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...entGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-193 3email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-222 -1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40emai l%2Etst&how=JyI%3D&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 208

Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JOENLOIBBMIGGLMEBOFKCJJK; path=/ /formpage.asp Details The POST variable how has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...gram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=\"&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BPDNLOIBFBDIEMPFEEEKJGFC; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 820 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastN Acunetix Website Audit 209

ame=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWo rkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&emai l=sample%40email%2Etst&how='&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=N o&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PODNLOIBOCFOPIFLFHLPLPLA; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=\'&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EOENLOIBFHDJCNHJOABPGGGJ; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 210

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2221933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40e mail%2Etst&how=%00'&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HOENLOIBKHJLGDBJHDKGAMEF; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...es&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2 22-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=1 11-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample% 40email%2Etst&how='&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KOENLOIBJKELLKOLFMIOHLDK; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to \' . Request Acunetix Website Audit 211

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=\'&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DPDNLOIBMLFANBBAOMOKMLPC; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...m=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=JyI%3D&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 212

Set-Cookie: ASPSESSIONIDCCSSQBCR=GPDNLOIBFJJMJDAACCIKIOMI; path=/ /formpage.asp Details The POST variable how has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=\"&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MOENLOIBBEMEJDBCKEKNGONK; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=acunetix'"&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 213

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FPDNLOIBGMHGIMEEEBPAEDKF; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=%2527&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EPDNLOIBPPNLAAJGDKLKHHLJ; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 214

...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=%2527&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LOENLOIBEOLBJJMBCGHIPDPO; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 833 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=%2527&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AOENLOIBBEFHCHOPIKIIPKLF; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Acunetix Website Audit 215

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=%00'&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JADNLOIBDLNKHJLNBDIMDAGO; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=JyI%3D&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IADNLOIBKEJHCDLMALHOIKEA; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to acunetix'" . Acunetix Website Audit 216

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=acunetix'"&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OADNLOIBMKNDHIHOMOIAFFKG; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 840 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...uardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1933ema il@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-222-193 3email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40email%2E tst&how=acunetix'"&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 217

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NACNLOIBCLDPCHCBJPHINENL; path=/ /formpage.asp Details The POST variable how has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=\"&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PACNLOIBJDMLNOJKGICFPBJM; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...o&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=\'&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 218

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EADNLOIBMBDFOPKPHGNAGKCP; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=%2527&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DADNLOIBDBNFJEEEENEEEDDP; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 219

(line truncated) ...o&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=\"&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FADNLOIBHDNBNLNAGBGNEAJI; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how='&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HADNLOIBIPKGLCAJBIODAFHA; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 220

Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...m=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=%2527&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GADNLOIBAAEGDHFKANMILAAH; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 833 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2221933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40e mail%2Etst&how=%00'&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AADNLOIBCGFINIABFFBDCKGG; path=/ Cache-control: private

Acunetix Website Audit

221

/formpage.asp Details The POST variable how has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=\"&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LACNLOIBMGIDDDLEJLKNONEO; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=JyI%3D&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 222

Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MACNLOIBBANBAEGBNABOKDAJ; path=/ /formpage.asp Details The POST variable how has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 838 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...uardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1933ema il@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-222-193 3email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40email%2E tst&how=acunetix'"&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BOENLOIBBOJILDLBDEDAJNNL; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2 Acunetix Website Audit 223

22-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=1 11-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample% 40email%2Etst&how='&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=COENLOIBEEFNOCPBODKHKHAB; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=%00'&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DOENLOIBAJGELFCDHBJKCPPL; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 839 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 224

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...GuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1933em ail@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-222-19 33email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40email%2 Etst&how=acunetix'"&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BADNLOIBAMDNKBPBIBMCLCCL; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=\'&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OACNLOIBIHIJMAOGKBCAHAHL; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to ' . Request Acunetix Website Audit 225

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...o&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how='&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BBCNLOIBHFICGLBOIDDFNCLF; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=%00'&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 226

Set-Cookie: ASPSESSIONIDCCSSQBCR=DBCNLOIBJENFEBHMMBCDCKDH; path=/ /formpage.asp Details The POST variable how has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=%2527&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CBCNLOIBPMJNGJFBEIBINNED; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 826 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111 -222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone =111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sampl e%40email%2Etst&how=JyI%3D&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 227

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CPDNLOIBOCIIDEEBGFDLNFKP; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...gram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=\'&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OODNLOIBNMCEOJFJNHKLEMGK; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 836 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 228

...entGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-193 3email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-222 -1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40emai l%2Etst&how=JyI%3D&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EBCNLOIBLMDHDEOHBCPHOKHM; path=/ Cache-control: private /formpage.asp Details The POST variable how has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= 111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=%00'&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=APDNLOIBMKJOFKDDEKINLKEC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Acunetix Website Audit 229

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=acunetix'"&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PNDNLOIBNCEGHNJECFDHHEAM; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ing&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst& ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@a ddress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=%00'&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EPCNLOIBEBGBCAKJLBHGAOKJ; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to acunetix'" . Acunetix Website Audit 230

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...cedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuard ianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst& ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=acunetix'"&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OPBNLOIBNIFGLFAENMMJJMAE; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ad dress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=%2527&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 231

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FPCNLOIBOMEIDHIDLAACPCID; path=/ /formpage.asp Details The POST variable ParentCellPhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=\"&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DPCNLOIBNIGBCKONPKKHKKIK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ucedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuar dianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst &ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=acunetix'"&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 232

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=APCNLOIBHCBFMFCDHKKAOLIC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGu ardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.t st&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=%00'&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CMENLOIBMPECOJFLFNKGGENO; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 233

(line truncated) ...eReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=JyI%3D&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BPCNLOIBKCMMMILKBMIPJAGN; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone='&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BMENLOIBMHJHGHOAFKEJNBPC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 234

Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone='&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CPCNLOIBAHFBIFKDEIDHJOCE; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=acunetix'"&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HPCNLOIBDICKELICOPIFOHHL; path=/ Cache-control: private

Acunetix Website Audit

235

/formpage.asp Details The POST variable ParentCellPhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address. tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=JyI%3D&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AACNLOIBLBBALLLFFMEKDIPH; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...educedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGua rdianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.ts t&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=%2527&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 236

Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MLENLOIBKBJLBECKGICHCEFH; path=/ /formpage.asp Details The POST variable ParentCellPhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...g&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ad dress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone='&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BACNLOIBANFLIDFMCJGMFMKD; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t Acunetix Website Audit 237

st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=\"&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HNDNLOIBACIBGNBKCBJGHKLF; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email @address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=\'&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=INDNLOIBCNBJFBOBMDBFBPFB; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 238

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...g&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=JyI%3D&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NNDNLOIBALAGMCKMHPCBGMKO; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ing&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst& ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@a ddress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=%2527&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ONDNLOIBBJHCNDLFEPOODNNB; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to \" . Request Acunetix Website Audit 239

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Par entGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addr ess.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=\"&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PPBNLOIBEENONCHEJCCOBCJB; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst &ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=%00'&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 240

Set-Cookie: ASPSESSIONIDCCSSQBCR=LNDNLOIBDLEHHEIDOHFNFBPP; path=/ /formpage.asp Details The POST variable ParentCellPhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 798 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address. tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933ema il@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone='&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MNDNLOIBDGHJAECBOJELKDEM; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...dLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardian LastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Par entWorkPhone=111-222-1933email@address.tst&ParentCellPhone=acunetix'"&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 241

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DMENLOIBMKNKJCIKBHFKJOIC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@addres s.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933e mail@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=\"&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JPBNLOIBLCFGGBEDLNJGENNK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 242

...reeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pare ntGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addre ss.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=%00'&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NOCNLOIBFECBDFAAMPBJDJJK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email @address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=JyI%3D&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MPBNLOIBBHEDHALHDLAAAKDN; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Acunetix Website Audit 243

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone='&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IPBNLOIBNGBBEFDBFMKFGCNJ; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=\'&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BODNLOIBMKMADLNOMOMDJMGH; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to %2527 . Acunetix Website Audit 244

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=%2527&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OOCNLOIBNKPFKMKAHHEOHDDE; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=\'&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 245

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=POCNLOIBPLNEMKGNHFPFDEPF; path=/ /formpage.asp Details The POST variable ParentCellPhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ad dress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=JyI%3D&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FODNLOIBNJEHPBABPHGEJFNA; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=\"&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 246

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DODNLOIBPGDADGFOLAFGNOMO; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuar dianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst &ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=JyI%3D&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GMENLOIBNEACHEJFIJMCJPEG; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 247

(line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGu ardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.t st&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=%2527&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JMENLOIBKPADEECDOFFBLKEI; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address. tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=%00'&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LMENLOIBFNCOFNABNKEABCCO; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 248

Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=\"&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EMENLOIBPFJHFLLJOHGNOEFG; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=\'&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FMENLOIBFPBOMOBLONHKEOBC; path=/ Cache-control: private

Acunetix Website Audit

249

/formpage.asp Details The POST variable ParentCellPhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Pare ntGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addre ss.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone='&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HMENLOIBPPPLGPLKFHAKLGAN; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=%00'&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 250

Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NPBNLOIBHJDKGDFIPKPEDHEO; path=/ /formpage.asp Details The POST variable ParentCellPhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Par entGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addr ess.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=\'&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LPBNLOIBEFMINBJCECNCCHHO; path=/ Cache-control: private /formpage.asp Details The POST variable ParentCellPhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Paren Acunetix Website Audit 251

tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=%2527&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KPBNLOIBGIIBDMHLGKENDOHB; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ing&FreeReducedLunchProgram=No&ParentGuardianFirstName=%00'&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LMCNLOIBEFNOMJDOLJCLELDP; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 252

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=acunetix'"&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OMCNLOIBCNFHACIIBAOBAIHK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=\"&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IMCNLOIBELLPMHOJPMEPIFJA; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to ' . Request Acunetix Website Audit 253

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName='&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JMCNLOIBFBMOKLHEHJGJCIFN; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=%2527&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 254

Set-Cookie: ASPSESSIONIDCCSSQBCR=MMCNLOIBLMMMDJGDJMPMFGFP; path=/ /formpage.asp Details The POST variable ParentGuardianFirstName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=Yes&ParentGuardianFirstName=JyI%3D&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KMCNLOIBOPCKAMJLDMGOGJCC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=Yes&ParentGuardianFirstName=%2527&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 255

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HMCNLOIBIKILPHMDMPGKDNIK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=\'&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EMCNLOIBBIGIIEBPCLFGPJNF; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 796 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 256

...t=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName='&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:23 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CJFNLOIBMHIAABPFOPGNLMKH; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...educedLunchProgram=No&ParentGuardianFirstName=JyI%3D&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:23 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BJFNLOIBKGNOEBHLJLMCOHFK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Acunetix Website Audit 257

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=Yes&ParentGuardianFirstName=%00'&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GMCNLOIBAFDKNDKNPDHPKKLL; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=%00'&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:23 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AJFNLOIBNHAFPPLPKMNCFPJN; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to acunetix'" . Acunetix Website Audit 258

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ucedLunchProgram=Yes&ParentGuardianFirstName=acunetix'"&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DMCNLOIBFIGINFPDANMBCPOC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=%2527&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 259

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BKENLOIBJNDPLJLPMCPODFMO; path=/ /formpage.asp Details The POST variable ParentGuardianFirstName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=JyI%3D&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JLDNLOIBCJLPJBMGMNHFMJCA; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=\"&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 260

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MLDNLOIBOCMBGCHNPOENJPBD; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=\'&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KLDNLOIBCBNIIEBPNAKIDMLL; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 261

(line truncated) ...g&FreeReducedLunchProgram=No&ParentGuardianFirstName=JyI%3D&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DLDNLOIBNOAPOOJPGFHAOOLA; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=No&ParentGuardianFirstName=%00'&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ELDNLOIBPACOBCAIDDIPKCKI; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 262

Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName=acunetix'"&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GLDNLOIBPKKCDJNKNKGFKAEE; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 798 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName='&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FLDNLOIBAFHDCOAEDKBGFNFI; path=/ Cache-control: private

Acunetix Website Audit

263

/formpage.asp Details The POST variable ParentGuardianFirstName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...educedLunchProgram=No&ParentGuardianFirstName=%2527&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IJENLOIBLOIFNBINFLBNJMPA; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ducedLunchProgram=No&ParentGuardianFirstName=JyI%3D&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 264

Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NJENLOIBCHANPDOILMGDJNPM; path=/ /formpage.asp Details The POST variable ParentGuardianFirstName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...dLunchProgram=No&ParentGuardianFirstName=acunetix'"&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OJENLOIBDNEKCBBKACBKMNDO; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=\"&ParentGuardianLastName=111-222-1 Acunetix Website Audit 265

933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LJENLOIBMKDCJPNKNLEEOOKJ; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=\'&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MJENLOIBMPKAJFDABEMPCOIF; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 266

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=%00'&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KJENLOIBHMJBDBKKIBAPMBHF; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName='&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HJENLOIBOOEGEFFGOFGEDOEK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to ' . Request Acunetix Website Audit 267

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=No&ParentGuardianFirstName='&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PJENLOIBCLFMDMFALLNBEEDC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=No&ParentGuardianFirstName=%00'&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 268

Set-Cookie: ASPSESSIONIDCCSSQBCR=AKENLOIBEHMBFIDLCGLMDIAB; path=/ /formpage.asp Details The POST variable ParentGuardianFirstName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ing&FreeReducedLunchProgram=No&ParentGuardianFirstName=%2527&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CLDNLOIBLJELKJLFFOICKGKB; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=Yes&ParentGuardianFirstName=JyI%3D&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 269

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HNBNLOIBPIKFNDGFGFKCLKBI; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=\'&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GNBNLOIBCCHCLNMELGIONHPK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 270

...g&FreeReducedLunchProgram=Yes&ParentGuardianFirstName='&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NNBNLOIBMCGBEHALMGECAGLL; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=\"&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LNBNLOIBEIJFGONHEOCKOIHL; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Acunetix Website Audit 271

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...cedLunchProgram=Yes&ParentGuardianFirstName=acunetix'"&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FNBNLOIBLOPCEEMLEGICGDHK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName='&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ANBNLOIBEHAMDEIINNCMHIHD; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to %2527 . Acunetix Website Audit 272

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=Yes&ParentGuardianFirstName=%2527&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CNBNLOIBFDCOENADMCADMGIF; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=Yes&ParentGuardianFirstName=%00'&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 273

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ENBNLOIBNJONMPGNJKBPIDIF; path=/ /formpage.asp Details The POST variable ParentGuardianFirstName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=JyI%3D&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PMBNLOIBMNIMGGCIOLEIJAEC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 815 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...edLunchProgram=No&ParentGuardianFirstName=acunetix'"&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 274

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HIFNLOIBAMDPEACNECKKENBD; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName=\'&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JIFNLOIBGOIHBOFCKNJOABAF; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 275

(line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=\"&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BLDNLOIBDHAOBOKNDLJLAIOA; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=\'&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PKDNLOIBBPLNILHMAGJIHFIE; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 276

Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName=\"&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NIFNLOIBCDEGDJPLICKPJMBD; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=No&ParentGuardianFirstName=acunetix'"&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:23 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PIFNLOIBGHCDHONIGNNJAAJD; path=/ Cache-control: private

Acunetix Website Audit

277

/formpage.asp Details The POST variable ParentGuardianFirstName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=\"&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BNBNLOIBIFFLCHPONNCHEDKP; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianFirstName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=%2527&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 278

Connection: close Date: Thu, 21 Jun 2012 17:32:23 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OIFNLOIBPPDHNEPICFJLBPIO; path=/ /formpage.asp Details The POST variable ParentGuardianLastName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=%2527&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PMCNLOIBPBGFAKFIMAFGJLLE; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Pare Acunetix Website Audit 279

ntGuardianLastName='&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DKENLOIBDNHOJKNPEHCNGMHM; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Pare ntGuardianLastName='&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JKENLOIBEECGNEIDCNBCEEJH; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 280

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=\"&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IKENLOIBCMEMPPJECHIENEPJ; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=%00'&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LKENLOIBDGKDIHAEBMFIICJE; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to %2527 . Request Acunetix Website Audit 281

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGu ardianLastName=%2527&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KKENLOIBKDDHKDCEAPOFDMHP; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGu ardianLastName=%00'&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 282

Set-Cookie: ASPSESSIONIDCCSSQBCR=FKENLOIBFMFCLCBIGJHEMBBD; path=/ /formpage.asp Details The POST variable ParentGuardianLastName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...dLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardian LastName=acunetix'"&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EKENLOIBGADAOBPMNNOBEDIP; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuar dianLastName=JyI%3D&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 283

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HKENLOIBIMHNEDLGHFGKEIEF; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=\'&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GKENLOIBGFPKAGNDNPAMCDGO; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 284

...g&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=JyI%3D&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NLDNLOIBCPEEKEINFFJDFJJN; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=\'&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LLDNLOIBOLCMIBCNGDIOLCPL; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Acunetix Website Audit 285

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Par entGuardianLastName=\"&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BOBNLOIBDIGMLIDJNMEPIKFO; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst &ParentGuardianLastName=%00'&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OLDNLOIBOGLAHNPNDGLEHMPO; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to JyI%3D . Acunetix Website Audit 286

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=JyI%3D&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HOBNLOIBPEBNICCBLMCPDKNH; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...g&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName='&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 287

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GOBNLOIBGCHKKAOGLANOEHEC; path=/ /formpage.asp Details The POST variable ParentGuardianLastName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ing&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst& ParentGuardianLastName=%2527&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PLDNLOIBGPHJAMGMPOHGJKBK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Par entGuardianLastName=\'&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 288

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AOBNLOIBIOGHNDOPDIGPDLAA; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@addres s.tst&ParentGuardianLastName=\"&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JNBNLOIBJJAEKDJJPEKLHBJB; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 289

(line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName='&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=INBNLOIBHBEPJLBEECACEKFH; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=\"&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ILDNLOIBGDALJEFGPGIKJABF; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 290

Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=JyI%3D&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KNBNLOIBIEBCPKMCGJKGDPEG; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=%00'&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ONBNLOIBDMIGECFCBICBJDPF; path=/ Cache-control: private

Acunetix Website Audit

291

/formpage.asp Details The POST variable ParentGuardianLastName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...cedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuard ianLastName=acunetix'"&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PNBNLOIBHEFBCLACDAMCKDOJ; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=%2527&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 292

Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MNBNLOIBAPDGPLMEEJAIOAMF; path=/ /formpage.asp Details The POST variable ParentGuardianLastName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ucedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuar dianLastName=acunetix'"&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ENCNLOIBGNAGAEPIJCBJOPMJ; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address. Acunetix Website Audit 293

tst&ParentGuardianLastName='&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FNCNLOIBIKNEFPLHMGOBNKDD; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=%2527&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GNCNLOIBGFNHEEKECLPGODEA; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 294

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pare ntGuardianLastName=%00'&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DNCNLOIBLFHNKDBEONLBEHIJ; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=JyI%3D&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ANCNLOIBNDCGKEGJOJIJKDMP; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to \' . Request Acunetix Website Audit 295

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=\'&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BNCNLOIBBJBIHJLKBPIBEHKP; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=\"&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 296

Set-Cookie: ASPSESSIONIDCCSSQBCR=CNCNLOIBIAHPBDPJHJKLCINC; path=/ /formpage.asp Details The POST variable ParentGuardianLastName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ing&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst& ParentGuardianLastName=%00'&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HNCNLOIBEBFOMABNFCPBOKAA; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=\"&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 297

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DMDNLOIBADCOKAMGLMICIKHN; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=acunetix'"&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BMDNLOIBIICCPKIGMMLMHOGP; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 798 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 298

...Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address. tst&ParentGuardianLastName='&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AMDNLOIBBOEOPJKHLHFHEOJA; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=\'&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CMDNLOIBOKHDOBCDILIINGHN; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Acunetix Website Audit 299

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=acunetix'"&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=INCNLOIBLEPMKAGIACAEIDDC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...educedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGua rdianLastName=%2527&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CKENLOIBFCAMIGCODCGGIPDK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentGuardianLastName has been set to JyI%3D . Acunetix Website Audit 300

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=JyI%3D&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HMDNLOIBNODKNLFBINIBLAEM; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Par entGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=\'&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 301

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KOBNLOIBONMIFCPMCFKCCBJM; path=/ /formpage.asp Details The POST variable ParentHomePhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@addres s.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=\"&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IOBNLOIBHPLBCCIDOJBCFBEK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=111-222-1933email@address.tst&ParentHomePhone=JyI%3D&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 302

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LOBNLOIBBJOOLAGDDGFCCLIC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...g&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone='&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NOBNLOIBJHNGABDLJPEDFCLB; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 303

(line truncated) ...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Par entGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=\"&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MOBNLOIBPDCKIHHDMOLDKENO; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=JyI%3D&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DOBNLOIBGEPFGJGKGODAGLFC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 304

Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone='&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=COBNLOIBHGBLALJONBINOBPC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=%2527&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EOBNLOIBHDEBJJDFAIBDPFCC; path=/ Cache-control: private

Acunetix Website Audit

305

/formpage.asp Details The POST variable ParentHomePhone has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...cedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuard ianLastName=111-222-1933email@address.tst&ParentHomePhone=acunetix'"&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JOBNLOIBGLKFAPPKDJGKNBHL; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=%00'&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 306

Connection: close Date: Thu, 21 Jun 2012 17:31:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FOBNLOIBHNNPOAMDOHHLHKJO; path=/ /formpage.asp Details The POST variable ParentHomePhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone='&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PNCNLOIBFEFOMACFBOPCGAEI; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Paren Acunetix Website Audit 307

tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=JyI%3D&ParentWorkPhone=1 11-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample% 40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=N o&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ONCNLOIBJNCBKCLNFDJPEMIA; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ing&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst& ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=%00'&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AOCNLOIBAACAICCDCMNNLCID; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 308

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=acunetix'"&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=COCNLOIBIPJNDDOKHGKFEJNP; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=%2527&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BOCNLOIBGEEHEKENMKGGEJHB; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to acunetix'" . Request Acunetix Website Audit 309

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ucedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuar dianLastName=111-222-1933email@address.tst&ParentHomePhone=acunetix'"&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KNCNLOIBNCKNCIGPNHCPMONH; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=%2527&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 310

Set-Cookie: ASPSESSIONIDCCSSQBCR=JNCNLOIBFOFIMCMCJKKLBGLD; path=/ /formpage.asp Details The POST variable ParentHomePhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=\'&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MNCNLOIBHBNFJLBNHOAHAOFK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pare ntGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=%00'&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 311

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NNCNLOIBOAOBFANCKGMJIBFM; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=\"&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LNCNLOIBKDCHJKOKPBLHNJLK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 312

...g&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=JyI%3D&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FMDNLOIBDBDFIODFJEMGEBPG; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=\'&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GMDNLOIBBANMBFLLIPAIAJNL; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Acunetix Website Audit 313

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=\"&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EMDNLOIBCHIPPJLCDBCPMPGB; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=111-222-1933email@address.tst&ParentHomePhone=%00'&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FLENLOIBMCLOOHKIAOKAJEHD; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to %2527 . Acunetix Website Audit 314

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGu ardianLastName=111-222-1933email@address.tst&ParentHomePhone=%2527&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HLENLOIBJMHOLCGADKNEHEDM; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=acunetix'"&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 315

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LMDNLOIBEDFKDBDJGDLFNEDD; path=/ /formpage.asp Details The POST variable ParentHomePhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=JyI%3D&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MMDNLOIBGNNCIKHOLFAICBEO; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst &ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=%00'&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 316

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KMDNLOIBHFCEKHIPFALKBKOG; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 798 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address. tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone='&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JMDNLOIBIBAFDECPKJELLPGJ; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 317

(line truncated) ...ing&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst& ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=%2527&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IMDNLOIBILKNKMGKIGINDDFK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...dLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardian LastName=111-222-1933email@address.tst&ParentHomePhone=acunetix'"&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PKENLOIBIIFHMGKOKOMMBHNM; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 318

Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=\"&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OMDNLOIBOKDGLAMHKCPPMNDO; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGu ardianLastName=111-222-1933email@address.tst&ParentHomePhone=%00'&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OKENLOIBHMOGHIAFCNOFGNJI; path=/ Cache-control: private

Acunetix Website Audit

319

/formpage.asp Details The POST variable ParentHomePhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...educedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGua rdianLastName=111-222-1933email@address.tst&ParentHomePhone=%2527&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NKENLOIBOPJGPEKGBJLHJPGB; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone='&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 320

Connection: close Date: Thu, 21 Jun 2012 17:32:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MKENLOIBPFEPFOPEGEAMGFHH; path=/ /formpage.asp Details The POST variable ParentHomePhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=\"&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CLENLOIBKFDNBDGFBAEEPJAG; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address. Acunetix Website Audit 321

tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=\'&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=N o&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NMDNLOIBNBIGAHPFLAMNMAHC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Pare ntGuardianLastName=111-222-1933email@address.tst&ParentHomePhone='&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ELENLOIBDPJBEOAIPCKPNMGD; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 322

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuar dianLastName=111-222-1933email@address.tst&ParentHomePhone=JyI%3D&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ALENLOIBPOEDFHCCEEKBIODO; path=/ Cache-control: private /formpage.asp Details The POST variable ParentHomePhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=\'&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DLENLOIBFNIHBBHMAJOCDKHJ; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to %2527 . Request Acunetix Website Audit 323

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGu ardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.t st&ParentWorkPhone=%2527&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NLENLOIBEFABOENMHGLFEFIB; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=\"&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 324

Set-Cookie: ASPSESSIONIDCCSSQBCR=LLENLOIBGCHLDIBNGHMDAFBP; path=/ /formpage.asp Details The POST variable ParentWorkPhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuar dianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst &ParentWorkPhone=JyI%3D&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PLENLOIBCCNFMMLJJBADAEMC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Pare ntGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addre ss.tst&ParentWorkPhone='&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 325

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OLENLOIBKDIMMIBIEIOOKPLJ; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...dLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardian LastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&Par entWorkPhone=acunetix'"&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KLENLOIBIHHIBOGGECLMGOLC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 326

...reeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=acunetix'"&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KNDNLOIBEHFDPEMCIKIDFIIF; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=acunetix'"&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MOCNLOIBIOIPDKMBLMOAOGML; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Acunetix Website Audit 327

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGu ardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.t st&ParentWorkPhone=%00'&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JLENLOIBMILMBKACGFEICCBN; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=\'&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ILENLOIBHEGEOKKPPOGFJDCM; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to JyI%3D . Acunetix Website Audit 328

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...g&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone=JyI%3D&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DNDNLOIBGIIEHFGIHKIOKGNM; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email @address.tst&ParentWorkPhone=\"&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 329

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BNDNLOIBAOECKNLIEIJGHIHI; path=/ /formpage.asp Details The POST variable ParentWorkPhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ing&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst& ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@a ddress.tst&ParentWorkPhone=%2527&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CNDNLOIBEDIIKPAHGCHIFAIF; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email @address.tst&ParentWorkPhone=\'&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 330

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PMDNLOIBACKEFHMBJLHLBKAM; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 798 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address. tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933ema il@address.tst&ParentWorkPhone='&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ANDNLOIBGCKGPHINCJBAMOFA; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 331

(line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=\"&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JNDNLOIBIBPJJNCKBKJMDKHP; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address. tst&ParentWorkPhone=%00'&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AMENLOIBMMCHGMGEIPCBBCKF; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 332

Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ad dress.tst&ParentWorkPhone=JyI%3D&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GNDNLOIBHDJOEFPGLKMINBBH; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst &ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ address.tst&ParentWorkPhone=%00'&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ENDNLOIBBFDFMFMBIEILFGJA; path=/ Cache-control: private

Acunetix Website Audit

333

/formpage.asp Details The POST variable ParentWorkPhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=\'&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FNDNLOIBMKGHHFFMIDELICCP; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@addres s.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933e mail@address.tst&ParentWorkPhone=\"&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 334

Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=POBNLOIBEKCCMHNCCEGPMANN; path=/ /formpage.asp Details The POST variable ParentWorkPhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Par entGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addr ess.tst&ParentWorkPhone=\'&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CPBNLOIBIIAPHCNKHJJJHCPF; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.t Acunetix Website Audit 335

st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=JyI%3D&ParentCellPhone=111-222-1933email@address.tst&email =sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=N o&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DPBNLOIBANIKKHMKLJDACLIF; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=%2527&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DOCNLOIBNFLBDOHFKLDIBCFK; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 336

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=%2527&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OOBNLOIBGAONFDOLPOLOFNFM; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone='&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=APBNLOIBGJGNBMCGCCIGAHAI; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to %00' . Request Acunetix Website Audit 337

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone=%00'&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BPBNLOIBOLKLMKPLCFJCEIIJ; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...g&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ad dress.tst&ParentWorkPhone='&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 338

Set-Cookie: ASPSESSIONIDCCSSQBCR=HPBNLOIBMPICDNIEMJHLFDJK; path=/ /formpage.asp Details The POST variable ParentWorkPhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...educedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGua rdianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.ts t&ParentWorkPhone=%2527&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GLENLOIBCBMDEOGPEHFECHCN; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&Paren tGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addres s.tst&ParentWorkPhone='&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 339

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BLENLOIBOMAAOCBDGAIOINAB; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...cedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuard ianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst& ParentWorkPhone=acunetix'"&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EPBNLOIBHKBPPMECNGBFCILB; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 340

...FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Par entGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addr ess.tst&ParentWorkPhone=\"&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FPBNLOIBCKLDMLHFJHPMLBKE; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentG uardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address. tst&ParentWorkPhone=JyI%3D&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GPBNLOIBNMNDHNBEPMIFLFFN; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Acunetix Website Audit 341

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone='&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GOCNLOIBJBINCAPCBIKNNEHI; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Parent GuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address .tst&ParentWorkPhone=JyI%3D&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HOCNLOIBJDBMAKKIGBDGIFLC; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to \" . Acunetix Website Audit 342

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone=\"&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EOCNLOIBLJPJLOLLPBDEJJFI; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...reeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pare ntGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@addre ss.tst&ParentWorkPhone=%00'&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 343

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FOCNLOIBGLJOOMJKANBJBAJC; path=/ /formpage.asp Details The POST variable ParentWorkPhone has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ad dress.tst&ParentWorkPhone=%2527&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KOCNLOIBPOIKPLDBDFGIAJCF; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ing&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst& ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@a ddress.tst&ParentWorkPhone=%00'&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 344

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LOCNLOIBPNMNANLBEECJPOMO; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&Pa rentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@add ress.tst&ParentWorkPhone=\'&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IOCNLOIBCPGJPJHFONMNFEOI; path=/ Cache-control: private /formpage.asp Details The POST variable ParentWorkPhone has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 345

(line truncated) ...ucedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuar dianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst &ParentWorkPhone=acunetix'"&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JOCNLOIBIIIKFIMJOMFDCFLC; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 790 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...Subject=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@ address.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222 -1933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111 -222-1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdva ntagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&F ormAction=111-222-1933email@address.tst&FormID=1&Referer=JyI%3D Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OBENLOIBPMNDCJMIAAMEPECP; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 346

Host: www.advantagepoint.org Content-Length: 794 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ect=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@addr ess.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-193 3email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222 -1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantag ePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&Form Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PBENLOIBPAKBOJJOBPGDLMBK; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 789 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&Subject=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email @address.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-22 2-1933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=11 1-222-1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdv antagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst& FormAction=111-222-1933email@address.tst&FormID=1&Referer=%2527 Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NBENLOIBMKNJBDKPHGBJFBDB; path=/ Cache-control: private

Acunetix Website Audit

347

/formpage.asp Details The POST variable Referer has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 786 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...l=K&Subject=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933em ail@address.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111 -222-1933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone =111-222-1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&Approvalof AdvantagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.t st&FormAction=111-222-1933email@address.tst&FormID=1&Referer=\" Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JBENLOIBMNBIAJECPJFOPDNM; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 785 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...el=K&Subject=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933e mail@address.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=11 1-222-1933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhon e=111-222-1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&Approvalo fAdvantagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address. tst&FormAction=111-222-1933email@address.tst&FormID=1&Referer=' Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 348

Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KBENLOIBHNPBNOKDKHHODGAH; path=/ /formpage.asp Details The POST variable Referer has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ng&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&P arentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@ad dress.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933emai l@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantage PointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormA ction=111-222-1933email@address.tst&FormID=1&Referer=acunetix'" Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NAFNLOIBMIBJHFDHAJNLAEIN; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 795 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ct=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@addr Acunetix Website Audit 349

ess.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-193 3email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222 -1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&Approvalof AdvantagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MAFNLOIBKABKJGBHLLLNNJFL; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 795 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ct=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@addre ss.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933 email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-2221933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofA dvantagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.t st&FormAction=111-222-1933email@address.tst&FormID=1&Referer=\" Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OAFNLOIBIJEPMIIJENFFGLMD; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 350

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address .tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933em ail@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-19 33email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdv antagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ABFNLOIBOJELMFCAIBGIMLEO; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 793 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ject=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@add ress.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-19 33email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-22 2-1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&Approvalo fAdvantagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address. tst&FormAction=111-222-1933email@address.tst&FormID=1&Referer=' Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PAFNLOIBGDGFIMBKIENOJCJM; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to %00' . Request Acunetix Website Audit 351

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 788 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...K&Subject=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933emai l@address.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-2 22-1933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=1 11-222-1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAd vantagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst &FormAction=111-222-1933email@address.tst&FormID=1&Referer=%00' Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LBENLOIBHHFNCMAGNCADOEPJ; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 796 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...t=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@addres s.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933e mail@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1 933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAd vantagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst &FormAction=111-222-1933email@address.tst&FormID=1&Referer=%00' Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 352

Set-Cookie: ASPSESSIONIDCCSSQBCR=GBFNLOIBPHDICBJLLJOBMFJK; path=/ /formpage.asp Details The POST variable Referer has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 798 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address. tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933ema il@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-193 3email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdva ntagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst& FormAction=111-222-1933email@address.tst&FormID=1&Referer=%2527 Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IAFNLOIBPEMMGDBJHHMMKIMA; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...eading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933 email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvan tagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&F ormAction=111-222-1933email@address.tst&FormID=1&Referer=JyI%3D Response Acunetix Website Audit 353

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KAFNLOIBDJLIPALCFEPJDDBI; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@address .tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933em ail@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-19 33email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdv antagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst &FormAction=111-222-1933email@address.tst&FormID=1&Referer=%00' Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LAFNLOIBKDPGHGECCIFAHHCD; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 791 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 354

...ubject=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@a ddress.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-2221933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111222-1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvan tagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst& Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IBENLOIBJBJBHHLJDDNAFNEC; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 786 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...l=K&Subject=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933em ail@address.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111 -222-1933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone =111-222-1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&Approvalof AdvantagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.t st&FormAction=111-222-1933email@address.tst&FormID=1&Referer=\' Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MBENLOIBKDNNBNNKCKKLBMNL; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 787 Acunetix Website Audit 355

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=K&Subject=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933ema il@address.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111222-1933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone= 111-222-1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofA dvantagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address. Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HBENLOIBLAAILPAEHNMHLBLO; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 794 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ect=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@addr ess.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-193 3email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222 -1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=ABC%20Family&Approvalof AdvantagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address. tst&FormAction=111-222-1933email@address.tst&FormID=1&Referer=' Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HAFNLOIBFKMIIAPAGLLFDLAO; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to \" . Acunetix Website Audit 356

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 787 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=K&Subject=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933ema il@address.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111222-1933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone= 111-222-1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofA dvantagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.t st&FormAction=111-222-1933email@address.tst&FormID=1&Referer=\" Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GBENLOIBHKMBHIGBANCCCLOH; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 788 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...K&Subject=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933ema il@address.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111222-1933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone= 111-222-1933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdva ntagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&F ormAction=111-222-1933email@address.tst&FormID=1&Referer=JyI%3D Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 357

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KECNLOIBJBOIOBPGEOGMOOAP; path=/ /formpage.asp Details The POST variable Referer has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 795 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ct=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@addr ess.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-193 3email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222 -1933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdv antagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst &FormAction=111-222-1933email@address.tst&FormID=1&Referer=%00' Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LECNLOIBCGIODOOLKHBJLGHP; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 792 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...bject=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@a ddress.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-2221933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111222-1933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&Approvalof AdvantagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address. tst&FormAction=111-222-1933email@address.tst&FormID=1&Referer=' Acunetix Website Audit 358

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JECNLOIBOPABBGCNHELDOIMM; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.t st&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933emai l@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933 email@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantag ePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&FormA ction=111-222-1933email@address.tst&FormID=1&Referer=acunetix'" Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CDDNLOIBKKCBNOLHJKLGOCIP; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 784 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 359

(line truncated) ...vel=K&Subject=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-193 3email@address.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone= 111-222-1933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPh one=111-222-1933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=None&Approvalof AdvantagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address. Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IECNLOIBJCGKOAKIOCEBGEFJ; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 796 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...t=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@addre ss.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933 email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-2221933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdva ntagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst& FormAction=111-222-1933email@address.tst&FormID=1&Referer=%2527 Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MECNLOIBLKBCNFBFEAALKDDB; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 360

Host: www.advantagepoint.org Content-Length: 793 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ject=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@ad dress.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1 933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-2 22-1933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofA dvantagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address. Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BFCNLOIBFLPDNFIMKJCBIIFO; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 793 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ject=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@ad dress.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1 933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-2 22-1933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofA dvantagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.t st&FormAction=111-222-1933email@address.tst&FormID=1&Referer=\" Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CFCNLOIBGBPNPPDKDCHOPGNF; path=/ Cache-control: private

Acunetix Website Audit

361

/formpage.asp Details The POST variable Referer has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 791 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ubject=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@ address.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222 -1933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111 -222-1933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&Approvalo fAdvantagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address. tst&FormAction=111-222-1933email@address.tst&FormID=1&Referer=' Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PECNLOIBNEOMJECOKOLFBEGG; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@addres s.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933e mail@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1 933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvan tagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&F ormAction=111-222-1933email@address.tst&FormID=1&Referer=JyI%3D Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 362

Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NECNLOIBOONJMPKBOJHLHBLF; path=/ /formpage.asp Details The POST variable Referer has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ding&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.ts t&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email @address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933e mail@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantage PointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormA ction=111-222-1933email@address.tst&FormID=1&Referer=acunetix'" Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OECNLOIBGJFHNILCELIGCLEI; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 790 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...Subject=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email Acunetix Website Audit 363

@address.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-22 2-1933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=11 1-222-1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdv antagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.ts Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KDDNLOIBDALDAICNJBKNHJFK; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 789 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&Subject=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email @address.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-22 2-1933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=11 1-222-1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdv antagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst &FormAction=111-222-1933email@address.tst&FormID=1&Referer=%00' Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LDDNLOIBOCKNIKHBEFOMCFFF; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 794 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 364

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ect=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@add ress.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-19 33email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-22 2-1933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAd vantagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.ts Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HDDNLOIBFMLFMDPJAHGMBPBO; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 786 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...l=K&Subject=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933em ail@address.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111 -222-1933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone =111-222-1933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&Approvalof AdvantagePointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address. tst&FormAction=111-222-1933email@address.tst&FormID=1&Referer=' Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JDDNLOIBKGCBHBIAFIPHCNHA; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to \' . Request Acunetix Website Audit 365

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 792 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...bject=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@a ddress.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-2221933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111222-1933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&Approvalof AdvantagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.t st&FormAction=111-222-1933email@address.tst&FormID=1&Referer=\' Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IDDNLOIBJKJPLGGFKIIPAGMB; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 792 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...bject=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@a ddress.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-2221933email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111222-1933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&Approvalof AdvantagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.t st&FormAction=111-222-1933email@address.tst&FormID=1&Referer=\" Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 366

Set-Cookie: ASPSESSIONIDCCSSQBCR=FDDNLOIBGHBDAOFGFAJDEBFE; path=/ /formpage.asp Details The POST variable Referer has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 795 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ct=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@addr ess.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-193 3email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222 -1933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdv antagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst& FormAction=111-222-1933email@address.tst&FormID=1&Referer=%2527 Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EDDNLOIBJKCPDLLLBMGGPMOI; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 796 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...t=Reading&FreeReducedLunchProgram=Yes&ParentGuardianFirstName=111-222-1933email@addre ss.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933 email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-2221933email@address.tst&email=sample%40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdva ntagePointLearningasmySESProvider=No&ElectronicSignature=111-222-1933email@address.tst&F ormAction=111-222-1933email@address.tst&FormID=1&Referer=JyI%3D Response Acunetix Website Audit 367

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GDDNLOIBPDPKBOPJCFBBLECP; path=/ Cache-control: private /formpage.asp Details The POST variable Referer has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 795 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ct=Reading&FreeReducedLunchProgram=No&ParentGuardianFirstName=111-222-1933email@addre ss.tst&ParentGuardianLastName=111-222-1933email@address.tst&ParentHomePhone=111-222-1933 email@address.tst&ParentWorkPhone=111-222-1933email@address.tst&ParentCellPhone=111-2221933email@address.tst&email=sample%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantage PointLearningasmySESProvider=Yes&ElectronicSignature=111-222-1933email@address.tst&FormA ction=111-222-1933email@address.tst&FormID=1&Referer=acunetix'" Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MDDNLOIBJMOAFEFIIGCNFBPA; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 368

...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BHENLOIBLBMAFMFFBAFCPGNP; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DHENLOIBNNJMDPNKFKILBKFP; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Acunetix Website Audit 369

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HHENLOIBDHAFGCNANPFDBIKJ; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PHENLOIBNINHLPIJGBDAGHPG; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to %2527 . Acunetix Website Audit 370

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NHENLOIBIHLGLLEPFBKLDFLP; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 371

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EHENLOIBLACDEIMMBFCHDJPJ; path=/ /formpage.asp Details The POST variable School has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FHENLOIBAEBAJHHCHOBGCHGE; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 372

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GHENLOIBEDIFMEAKFNDEFPHG; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GKCNLOIBNANICGJOJEHNGKBF; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 373

(line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DKCNLOIBONEHMACAMBLGKDNE; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CKCNLOIBEDMPKJEOAKCBDGKA; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 374

Host: www.advantagepoint.org Content-Length: 815 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CGFNLOIBNGLNGCEKMLICJNDE; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FGFNLOIBCPPJOOOMIIMCGEDM; path=/ Cache-control: private

Acunetix Website Audit

375

/formpage.asp Details The POST variable School has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EGFNLOIBJPCGBNCGPIFHNDPD; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 376

Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DGFNLOIBAHDOKNFCBOFCGEHC; path=/ /formpage.asp Details The POST variable School has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BKCNLOIBEIMFMBLLDGHDDONO; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2 Acunetix Website Audit 377

22-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=1 11-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample% 40email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=N o&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KJCNLOIBJKMANNLJONMIKKHO; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JJCNLOIBBCGJHMBPNOCPJFJJ; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 378

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CLBNLOIBBHLIBBCNOMFDKJMP; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NJCNLOIBPACEEDOGPKOEKKKC; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to \' . Request Acunetix Website Audit 379

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AKCNLOIBGCIHHOEEACKHFBMP; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 380

Set-Cookie: ASPSESSIONIDCCSSQBCR=PJCNLOIBLNEOALNDOMHFKCCN; path=/ /formpage.asp Details The POST variable School has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OJCNLOIBLDCBOHAHNOBDJHHO; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 381

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HGFNLOIBPPEGCNMDJGLBMFAG; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LIDNLOIBFONGOILBDOFACONJ; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 382

...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KIDNLOIBIMOBMIKECBNPBNGM; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JIDNLOIBCIBJCPGOACPDNHEA; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Acunetix Website Audit 383

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NIDNLOIBEGFAIOGBKFDMOBPM; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AJDNLOIBJHHFJKKLIHNMAPMK; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to \" . Acunetix Website Audit 384

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PIDNLOIBMGKMHMPKBFBFIDAD; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 385

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OIDNLOIBPFCEKIBOEMJJMNEP; path=/ /formpage.asp Details The POST variable School has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IIDNLOIBEEPELJLLGNKAKGAM; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 386

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JGFNLOIBLONHMNJDJMDKCMHE; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 796 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IGFNLOIBHAJPEDIMBPDFOAFE; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 387

(line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GGFNLOIBKPKMJCMHHENBEMFK; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LGFNLOIBGJKPDFDOKKMHPCKG; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 388

Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GIDNLOIBHHPDNJMNAABGJLIB; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 798 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DIDNLOIBLINLKIIJMFAMGGBB; path=/ Cache-control: private

Acunetix Website Audit

389

/formpage.asp Details The POST variable School has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MGFNLOIBICMDBAMJAKHOCJDB; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 390

Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MKBNLOIBAGAMKCKHLPPLKHDA; path=/ /formpage.asp Details The POST variable School has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NKBNLOIBKMLICHOCNDOIHFCB; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 Acunetix Website Audit 391

2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PKBNLOIBMJMBDLANKKEFFNKF; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OKBNLOIBABNCOBBMHDJNNMGC; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 392

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JKBNLOIBMGNAHMLFEJNMGBDD; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IKBNLOIBFNBJDGJLADGPJAHH; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to %2527 . Request Acunetix Website Audit 393

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LKBNLOIBBCFEJPNBNIBPPPOJ; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 394

Set-Cookie: ASPSESSIONIDCCSSQBCR=KKBNLOIBJACBBCJPCFKFFOGD; path=/ /formpage.asp Details The POST variable School has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AHENLOIBOONFGNLLDLEGMFOI; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 395

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PGENLOIBGNOPKFHGDFJPACPD; path=/ Cache-control: private /formpage.asp Details The POST variable School has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BLBNLOIBJBALLJLODLHOKIOF; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 396

...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AIDNLOIBCMDMHDGOGIAIIHNH; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OHDNLOIBCLJCIOKAFLIDMBAN; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Acunetix Website Audit 397

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IGENLOIBDDDJNEMAOOKFJILM; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BIDNLOIBAGGJLKFKABMGLCPD; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to JyI%3D . Acunetix Website Audit 398

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NHDNLOIBNKIPOKMHOHPKIELD; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 399

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EGENLOIBIAKNGCDNFDBENNKC; path=/ /formpage.asp Details The POST variable SchoolDistrict has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MHDNLOIBDIDKHHEMCIIBEFOH; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 400

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LHDNLOIBFMHAPFJMPIGDOMKJ; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GGENLOIBNMPELNDKEKBLDAKC; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 401

(line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FIDNLOIBNDLMJOCAEMOJAHNJ; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NGENLOIBPCIOFBIDCBCFPCFG; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 402

Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OGENLOIBPCGLIOKHPGKKOBHB; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EIDNLOIBANDNHJMANHHPADGG; path=/ Cache-control: private

Acunetix Website Audit

403

/formpage.asp Details The POST variable SchoolDistrict has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:56 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HIDNLOIBBHPCDOKDBDECHGIF; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 404

Connection: close Date: Thu, 21 Jun 2012 17:32:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MGENLOIBNCKBCAGFLPBDAPJG; path=/ /formpage.asp Details The POST variable SchoolDistrict has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KGENLOIBIIJMCANFAFKJBJMB; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 Acunetix Website Audit 405

933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JGENLOIBADPDJDDEFKAGNEHC; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LGENLOIBCLIOPAIGLCMKBEMH; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 406

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CHENLOIBBPOLHLNIMKCIBLAC; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HJCNLOIBCPHBKLMJEHPIPILE; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to ' . Request Acunetix Website Audit 407

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GJCNLOIBFFINOFEILFDEMFEJ; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 408

Set-Cookie: ASPSESSIONIDCCSSQBCR=IJCNLOIBJKCNCEDHAGMLAHLI; path=/ /formpage.asp Details The POST variable SchoolDistrict has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MJCNLOIBGLOADBFKDGAABJJB; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 409

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LJCNLOIBFBCCMHNLOLPDDDIP; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BJCNLOIBDPMMHHBJBFDHFAPD; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 410

...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AJCNLOIBBHLEFKCFKABGCNGP; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DJCNLOIBDOHFENHFFODLEEIM; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Acunetix Website Audit 411

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EJCNLOIBGHPKDHBDLPNOCGMC; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FJCNLOIBJNOMPKBBOCGIBDPJ; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to ' . Acunetix Website Audit 412

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HKBNLOIBFJCCEDPFLJOLMAGG; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 413

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AKBNLOIBOGKDOMACOOBDNOHG; path=/ /formpage.asp Details The POST variable SchoolDistrict has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CKBNLOIBPDMPFMLLODBEGAAA; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 414

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PJBNLOIBOPFCJANOGDNCJMFO; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 798 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JHDNLOIBJEHKFHJEPKFIGFGC; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 415

(line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OJBNLOIBEKCIDJIIHLKKDEBL; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FKBNLOIBLMLEJGJEBGAEJONJ; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 416

Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GKBNLOIBDMEMGOMFKPDDEEOB; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EKBNLOIBOCAHBNIBKLDFBOCL; path=/ Cache-control: private

Acunetix Website Audit

417

/formpage.asp Details The POST variable SchoolDistrict has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BKBNLOIBIJBEGDJPJFJGCGDI; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 418

Connection: close Date: Thu, 21 Jun 2012 17:31:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DKBNLOIBIPDJDHCDKGDCDOAL; path=/ /formpage.asp Details The POST variable SchoolDistrict has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OFFNLOIBMELLFODKJBJDEGAC; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam Acunetix Website Audit 419

e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NFFNLOIBFBJKLGEOBJJFFDDL; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 796 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AGFNLOIBKIPILPMJPDNLJPEJ; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 420

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PFFNLOIBNMNACDPGJBKIFBOI; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BGFNLOIBJFEKBNCHIIANEMJE; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to acunetix'" . Request Acunetix Website Audit 421

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 815 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JFFNLOIBMDIAAAAJLAJLDFAH; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 422

Set-Cookie: ASPSESSIONIDCCSSQBCR=HFFNLOIBIGIBECDNGPNHFHDB; path=/ /formpage.asp Details The POST variable SchoolDistrict has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MFFNLOIBHOICAIBCDDPFAMKJ; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 423

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KFFNLOIBKFJAPGJDDDJFIIPH; path=/ Cache-control: private /formpage.asp Details The POST variable SchoolDistrict has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LFFNLOIBDNCLKJDEAGJBPKJC; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 424

...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CFENLOIBHCFMDKEIMEHBIBGJ; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EFENLOIBCCCGHJMCMFAHEJKG; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Acunetix Website Audit 425

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DFENLOIBMEHHKMCPFMGMIOAH; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 840 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FFENLOIBMPBFIPPOKOADNAFD; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to \' . Acunetix Website Audit 426

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GFENLOIBMLIMPGCEAIGIKLAJ; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 427

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HHCNLOIBJCLLBHMFPLCBCMGM; path=/ /formpage.asp Details The POST variable State has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 837 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PHCNLOIBEAHGECIFAGBCJNFF; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 833 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 428

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BICNLOIBJOHIKPBONJEKKAKJ; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NHCNLOIBLOFNBJANHCBNGCMO; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 429

(line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JHCNLOIBPLPLFJNFICAEAFCD; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KHCNLOIBGBHEAGIIJHJGAELB; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 430

Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MFENLOIBLJJCPKDEPBMBBCFB; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 833 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NFENLOIBECLHNMACAOHGMHKD; path=/ Cache-control: private

Acunetix Website Audit

431

/formpage.asp Details The POST variable State has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JFENLOIBLFMEONGBILPFPMCE; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 432

Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HFENLOIBONJILBJNHNIBEIPO; path=/ /formpage.asp Details The POST variable State has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 836 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IFENLOIBFFIJNDMIBLJMAFAG; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 838 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 Acunetix Website Audit 433

2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EIBNLOIBKEPJFFIDLKBCODAE; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HIBNLOIBIECKMBIFPONDCKKB; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 434

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EEFNLOIBHDCGEPLCAGNKHGLA; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IIBNLOIBEFAAEDEBOMIMBPBK; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to \' . Request Acunetix Website Audit 435

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FIBNLOIBLCPHJPBCGDIGIPIB; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 436

Set-Cookie: ASPSESSIONIDCCSSQBCR=GIBNLOIBIEJKICOGOGOKNJPE; path=/ /formpage.asp Details The POST variable State has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AICNLOIBLJACIGFCHAINJDCE; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 437

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IGDNLOIBLLMNHPLMBKNOBALB; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 826 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JGDNLOIBFPBDHLODDKDEBAJK; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 438

...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EGDNLOIBPBFFNKIGIBOCOHBA; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OEFNLOIBEHAOIOJLONELGMJL; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Acunetix Website Audit 439

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CGDNLOIBNBPCMPEPFNGBKKLJ; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KGDNLOIBEEJMCIDLPDPAJLDL; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to JyI%3D . Acunetix Website Audit 440

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BHDNLOIBIGBOCALIAEHKAHLP; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 441

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CHDNLOIBPADPKPHNGIIBCBEH; path=/ /formpage.asp Details The POST variable State has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OGDNLOIBNLPFPLNCHKLCHCNC; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 442

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MGDNLOIBHEALHENNDNJFMDJH; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NGDNLOIBIKDDOGJCFDIDINHA; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 839 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 443

(line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FEFNLOIBOALCDACIEPCEKHIE; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HEFNLOIBPANBGICDEPJHAAHH; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 444

Host: www.advantagepoint.org Content-Length: 826 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FICNLOIBKLLPCJHCJDDMFFDK; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CICNLOIBLOBEMJBCHCIKFFGB; path=/ Cache-control: private

Acunetix Website Audit

445

/formpage.asp Details The POST variable State has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EICNLOIBNNLAIDBJFIAOCCHE; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 820 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 446

Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GEFNLOIBIMAGJBAHAFELJDFB; path=/ /formpage.asp Details The POST variable State has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LEFNLOIBDFJMOGGGDGOJANIJ; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam Acunetix Website Audit 447

e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MEFNLOIBKBHOAGDJJDCDEAIM; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KEFNLOIBICBLCOPKINMCGKGG; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 448

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IEFNLOIBILMKALEFJECNJEEG; path=/ Cache-control: private /formpage.asp Details The POST variable State has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JEFNLOIBFJHLNAOLIFBKCIMI; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to ' . Request Acunetix Website Audit 449

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 796 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HBFNLOIBPNEMCJLCDAGLJIMG; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 815 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 450

Set-Cookie: ASPSESSIONIDCCSSQBCR=EBFNLOIBGPKIPEGPJMJIEOAM; path=/ /formpage.asp Details The POST variable StudentFirstName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DBFNLOIBJEPMPEBNKMMICJCD; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 451

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AEDNLOIBNMAEFELNDNLEODED; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NDDNLOIBKCHNKKHDDHKEOFCB; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 452

...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ODDNLOIBFMBABAKEFICPDOGJ; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PDDNLOIBHNNEKLNGOCHFKOOO; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Acunetix Website Audit 453

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CBFNLOIBNPFPDFBJMLHGJONJ; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EEDNLOIBLNFKEHOEKBKKKNBL; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to \" . Acunetix Website Audit 454

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GEDNLOIBICNFKDEIHBBFFAJD; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 455

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HEDNLOIBFIODEEAHOOGOJOLI; path=/ /formpage.asp Details The POST variable StudentFirstName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DEDNLOIBJMJGJICDFGBAGEJJ; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 456

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BBFNLOIBBGPKEOKOLICICAIN; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 798 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BEDNLOIBIPKOMJJGFNMFJPAC; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 457

(line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CEDNLOIBFPKEPKPMPDDJNHIF; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AFCNLOIBMKDBKJOPGIMHCGLO; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 458

Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DFCNLOIBMAIOCIPMJKNMBCAC; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EFCNLOIBMHEKKNMLCDGNBHMH; path=/ Cache-control: private

Acunetix Website Audit

459

/formpage.asp Details The POST variable StudentFirstName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IBFNLOIBBJPPGPCGIMELAPIN; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 460

Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MBFNLOIBMMAJLDJDECEJOMPI; path=/ /formpage.asp Details The POST variable StudentFirstName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LBFNLOIBOKDPIPAEAPEKPDLJ; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam Acunetix Website Audit 461

e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JBFNLOIBEJNJHKDBBLLMMPEL; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FFCNLOIBNBLMEADOJFGJLOOF; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 462

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KFCNLOIBJGEPPGNOAFHNEFPA; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MFCNLOIBIGIJIEDNCKJGPBDM; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to \" . Request Acunetix Website Audit 463

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FBFNLOIBEHHKBCDMMGEMEOEP; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 464

Set-Cookie: ASPSESSIONIDCCSSQBCR=JFCNLOIBIKCGDIBFKCHKDFAA; path=/ /formpage.asp Details The POST variable StudentFirstName has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GFCNLOIBGGMGHFHENJDMEJGL; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 465

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IFCNLOIBLPLDNEKCJELONAII; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HFCNLOIBPEJDDDBLBGGPOJOO; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 466

...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HCENLOIBMPFENOLKILIIIIDO; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ICENLOIBGFBBELLPKMEAMNBE; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Acunetix Website Audit 467

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BCENLOIBLGABOIMJEKBFHDAJ; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ACENLOIBGABCOCJPPHJLDKKK; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to \" . Acunetix Website Audit 468

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GCENLOIBKCOOEFILHLMPBOOM; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 469

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DCENLOIBKDKLCALBEBLLFLJM; path=/ /formpage.asp Details The POST variable StudentFirstName has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ECENLOIBJMMMKOJBPEBNONEL; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 470

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LCENLOIBOFBIJFDLLHNKPMOJ; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JCENLOIBJNDLCDDHNLOCMOKD; path=/ Cache-control: private /formpage.asp Details The POST variable StudentFirstName has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 471

(line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CCENLOIBICEECPLIAJIPAFMO; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EDENLOIBPJHKPOCPIFPAMCNA; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 472

Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BDENLOIBBKPIOBCGKEKNEMOJ; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 796 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BCFNLOIBJDKGHBOFAFHMBPAK; path=/ Cache-control: private

Acunetix Website Audit

473

/formpage.asp Details The POST variable studentlastname has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 815 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KBFNLOIBPCGFAJOMIHFDPGKG; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 474

Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FDENLOIBPEHGLAHMADMAGEDM; path=/ /formpage.asp Details The POST variable studentlastname has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OBFNLOIBCDJOHLHNAMDIFFNH; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= Acunetix Website Audit 475

111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=N o&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JEDNLOIBFNMDJIDCPJFEHHDD; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FEDNLOIBHHHNLGDABDICEIIN; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 476

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CCFNLOIBIHIJFDMGJBGKCBAJ; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DCFNLOIBIDOCHFJCPLKMNIDJ; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to %2527 . Request Acunetix Website Audit 477

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PBFNLOIBIPHHDICDBLDHEBOP; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 478

Set-Cookie: ASPSESSIONIDCCSSQBCR=ACFNLOIBCPOPLAIAIKCJJLCJ; path=/ /formpage.asp Details The POST variable studentlastname has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ECFNLOIBOAKODDIHJBNLFFKN; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 479

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NFCNLOIBNDODKAGBGOFOILAC; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OFCNLOIBHLLOLPNMHMFHNACM; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 480

...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AGCNLOIBMHPJGJFLHOKJHMEI; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BGCNLOIBLKCDAEFKIELKIMMO; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Acunetix Website Audit 481

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MCENLOIBAGBGNHMFEFLBJEJN; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NCENLOIBMOFJKCKANJPLOJBM; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to %2527 . Acunetix Website Audit 482

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LFCNLOIBDLLJHCAMBINPOPIM; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 483

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KCENLOIBMJJBCFNHDCBPFIGO; path=/ /formpage.asp Details The POST variable studentlastname has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CGCNLOIBCKFLMFHMOMCMKAFC; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 484

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PCENLOIBMJPPLIDDCFGHJMLE; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OCENLOIBEFINHIAMDFHIKEAN; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 485

(line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FCFNLOIBKHEMEKBKIHCFPCPB; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FCENLOIBKNGAFDOANKHMIHJJ; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 486

Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EGCNLOIBDCABNMAMBIBIOENP; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DGCNLOIBDJNHAKJNNCOPNNBI; path=/ Cache-control: private

Acunetix Website Audit

487

/formpage.asp Details The POST variable studentlastname has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JGCNLOIBHLHFCEIDCFECGBAE; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 488

Connection: close Date: Thu, 21 Jun 2012 17:31:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HGCNLOIBLGHAOHINECMIFLJL; path=/ /formpage.asp Details The POST variable studentlastname has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DFDNLOIBDPBHAJOENOAIMLGK; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= Acunetix Website Audit 489

111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=N o&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PEDNLOIBEHELEODJDPKFCCPI; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EFDNLOIBBNBJLKPNGIEMKLEH; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 490

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NBFNLOIBPBHOMNKMKMGOKMAM; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GDENLOIBPPAFCCAJJEKKDFLA; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to JyI%3D . Request Acunetix Website Audit 491

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LEDNLOIBIJJMJDLMKLDAIOAA; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 492

Set-Cookie: ASPSESSIONIDCCSSQBCR=IEDNLOIBHGOCGKNMBAACBIND; path=/ /formpage.asp Details The POST variable studentlastname has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 798 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KEDNLOIBGOIEMBCDJOLPJONC; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 493

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NEDNLOIBHKEEHFNLGDKHJGAE; path=/ Cache-control: private /formpage.asp Details The POST variable studentlastname has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MEDNLOIBNANMICOJFNFPABEM; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 494

...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GHFNLOIBDJIBGMNAHLNNFBMC; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 837 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EHFNLOIBJBDDDIBBNFKILGLJ; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Acunetix Website Audit 495

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HHFNLOIBEIJFDHINNBHLFOFH; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NJDNLOIBJAOCEAHIFFMOACMI; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to \' . Acunetix Website Audit 496

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LJDNLOIBCOEBCIIBBKNNLIFN; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 818 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 497

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KHFNLOIBHJMKBLGOBLAIENGG; path=/ /formpage.asp Details The POST variable Subject has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 835 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BLCNLOIBMBPGKNDMMIKMNGML; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 498

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DLCNLOIBOGAFFLCKCFDEKJIA; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ELCNLOIBPCFHKKOAPLIEHIEO; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 499

(line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NKCNLOIBDGEMKCCCOBNCBPCJ; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ALCNLOIBEMAKDKICEJBONOEL; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 500

Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CLCNLOIBPHGMLPCOHDOIBCBP; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 833 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LHFNLOIBIKABBOOGIFKKKAIP; path=/ Cache-control: private

Acunetix Website Audit

501

/formpage.asp Details The POST variable Subject has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KKDNLOIBAHCCGOEFMJDOKPPF; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 820 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 502

Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HKDNLOIBOBGDPNHGHLGIPDFA; path=/ /formpage.asp Details The POST variable Subject has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BIFNLOIBCONKCBIPDKNDCBCJ; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam Acunetix Website Audit 503

e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OHFNLOIBMPPAOMALJGEEEKJI; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MHFNLOIBODBKLONJJGBFEMBO; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 826 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 504

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PJDNLOIBLBHCDONAFABLMKII; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AKDNLOIBLPIMNJPKFGKKOHOO; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to \" . Request Acunetix Website Audit 505

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OJDNLOIBGODCAOBHKNCGNBBC; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 506

Set-Cookie: ASPSESSIONIDCCSSQBCR=DKDNLOIBBAMHPCMMHBEBIHPD; path=/ /formpage.asp Details The POST variable Subject has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EKDNLOIBMGGHNPAANFCHAGFE; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 507

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BKDNLOIBIBJMKFHNCFIBAMLH; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FLCNLOIBPOHJFFIKEPFICENL; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 508

...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MIENLOIBAGKDAHHFONOFFLLN; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LIENLOIBMLHNDPCNEOJOKPCH; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Acunetix Website Audit 509

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KIENLOIBDEIMLDFNKFLHNHDH; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LLBNLOIBIANHIIDFPIHAMDDN; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to %00' . Acunetix Website Audit 510

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OIENLOIBPGECMONFHHNONDIK; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 819 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 511

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NLBNLOIBKKADPPHNPNHJFJBK; path=/ /formpage.asp Details The POST variable Subject has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GIENLOIBEFJMKLENHPGEMBBM; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 512

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EIENLOIBBJFEPFCDGABCGJLF; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 833 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DIENLOIBMKKIIGJNHCDMEKAL; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 834 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 513

(line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JIENLOIBPNMPECFBBKKJFLJL; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IIENLOIBDMIMKEHDCHLJMDIN; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 514

Host: www.advantagepoint.org Content-Length: 838 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HIENLOIBPNCGMNOAAMLODIGL; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 819 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PHFNLOIBMMPKBNDHLEEBOMAI; path=/ Cache-control: private

Acunetix Website Audit

515

/formpage.asp Details The POST variable Subject has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 819 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CIFNLOIBOLLILCEDMEOGCMBP; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 832 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 516

Connection: close Date: Thu, 21 Jun 2012 17:31:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EMBNLOIBLIPGCACOHFLEPLDL; path=/ /formpage.asp Details The POST variable Subject has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GLCNLOIBGMFIKCKLNCPMGDDO; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 Acunetix Website Audit 517

11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HLCNLOIBGKHFIDFNEHNCDBPN; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KLCNLOIBJNGKICEMEMBMIGBI; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 518

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AMBNLOIBMHBNLNFPPKMKHMCI; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PLBNLOIBBDOIBEFBMHPHHCLM; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to ' . Request Acunetix Website Audit 519

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OLBNLOIBIMGMBHPMHKJILDNO; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 520

Set-Cookie: ASPSESSIONIDCCSSQBCR=DMBNLOIBPDNABIAGAJGAPOAH; path=/ /formpage.asp Details The POST variable Subject has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CMBNLOIBMHKHEKHGGKNPHLMP; path=/ Cache-control: private /formpage.asp Details The POST variable Subject has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 836 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 521

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BMBNLOIBKNFBJGFEAJIPCJMK; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...m=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111 -222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone =111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sampl e%40email%2Etst&how=Flyer&tvch=JyI%3D&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FBCNLOIBPPFPPEHICKHCGALK; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 820 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 522

...chProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLast Name=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentW orkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&ema il=sample%40email%2Etst&how=TV&tvch='&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ACCNLOIBHGGDKJOMCMDBECIM; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...gram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=Flyer&tvch=\'&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PPDNLOIBDNOABNOEEFBIONFN; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 830 Acunetix Website Audit 523

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=Flyer&tvch=acunetix'"&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OPDNLOIBEGOIFFHBIICBAHIH; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 827 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone= 111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample %40email%2Etst&how=Flyer&tvch=JyI%3D&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LPDNLOIBFLGFFFHLMBNALIEP; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to acunetix'" . Acunetix Website Audit 524

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 831 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2221933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40e mail%2Etst&how=Flyer&tvch=acunetix'"&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FBDNLOIBADKLIOJLPJLOIBFN; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 826 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111 -222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone =111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sampl e%40email%2Etst&how=Flyer&tvch=JyI%3D&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 525

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BAENLOIBJBCAIIOEKGNBBPAJ; path=/ /formpage.asp Details The POST variable tvch has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...gram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=Flyer&tvch=\"&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AAENLOIBKCEMIBKPFGCGLKJO; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= 111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=Flyer&tvch=\"&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 526

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MPDNLOIBNMJMGOOBONKAGDNM; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...m=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=%2527&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IPDNLOIBFGNEGPPMEBPJBEPK; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 527

(line truncated) ...ram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= 111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=TV&tvch=%2527&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GOENLOIBDHNHNBMCBDHCKCHO; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 819 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...Program=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastN ame=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWo rkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&emai l=sample%40email%2Etst&how=TV&tvch='&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IOENLOIBMCJEDPEABEKKFICO; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 528

Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=Flyer&tvch='&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NPDNLOIBDLAHACGAJNCKGJMC; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=%00'&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JPDNLOIBLEMHNLLKINOEOOLF; path=/ Cache-control: private

Acunetix Website Audit

529

/formpage.asp Details The POST variable tvch has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= 111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=Flyer&tvch=\'&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KPDNLOIBKKKGELCDBCEAFHFM; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...m=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=%00'&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 530

Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EBDNLOIBGMAOLLHEFFMFJPAP; path=/ /formpage.asp Details The POST variable tvch has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 828 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...es&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-2 22-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=1 11-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample% 40email%2Etst&how=TV&tvch=acunetix'"&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NOENLOIBPAJIFKLAJEINFHIE; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...gram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam Acunetix Website Audit 531

e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=%00'&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FOENLOIBGEHKBCEGPMFLCICD; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...gram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=Flyer&tvch='&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LADNLOIBMAKDKKABELPCBBBF; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 822 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 532

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...gram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=%2527&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=APENLOIBCEPFJBHJHMDOIGCI; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=TV&tvch=JyI%3D&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=POENLOIBLAMDNCBCJGJENLGH; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to \' . Request Acunetix Website Audit 533

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 820 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNa me=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWor kPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email =sample%40email%2Etst&how=TV&tvch=\'&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OOENLOIBOONAKNDPIKECPNMC; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 823 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=%00'&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 534

Set-Cookie: ASPSESSIONIDCCSSQBCR=MADNLOIBIDMDLACJJAKNAPCL; path=/ /formpage.asp Details The POST variable tvch has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 829 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone= 111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample %40email%2Etst&how=TV&tvch=acunetix'"&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BBDNLOIBJMNINFNMCGANCNPP; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...hProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastN ame=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWo rkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&emai l=sample%40email%2Etst&how=TV&tvch=\'&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 535

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CBDNLOIBHBFHFDHLPGMANCKF; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 826 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111 -222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone =111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sampl e%40email%2Etst&how=Flyer&tvch=%2527&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DBDNLOIBJKMFPDAHACNPDPJJ; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 825 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 536

...gram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName= 111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPh one=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sa mple%40email%2Etst&how=TV&tvch=JyI%3D&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NADNLOIBPFFCCLCMLEGKNINL; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 824 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=%2527&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PADNLOIBBKJEBJGLCOFHKNEO; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Acunetix Website Audit 537

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...hProgram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastN ame=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWo rkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&emai l=sample%40email%2Etst&how=TV&tvch=\"&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ABDNLOIBFFGFKJDEKCGPNCLL; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 821 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=%00'&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DPENLOIBIELKICHNDFOGINDH; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to \" . Acunetix Website Audit 538

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 820 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNa me=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWor kPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email =sample%40email%2Etst&how=TV&tvch=\"&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CPENLOIBCFALADFODHNKMJKA; path=/ Cache-control: private /formpage.asp Details The POST variable tvch has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 818 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...hProgram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLast Name=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentW orkPhone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&ema il=sample%40email%2Etst&how=TV&tvch='&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 539

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BPENLOIBKKNMPJJIKCGDNCCO; path=/ /formpage.asp Details The POST variable ZipCode has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 796 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GFFNLOIBFNFMJCEGMBBBJEKN; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 540

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FFFNLOIBFKFACNLEBHHFAFKE; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CFFNLOIBDMCLMDEKDMGEGMAI; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 541

(line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DFFNLOIBADMNPEDADGEDKLHI; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EFFNLOIBHAHJDHMGFFJHHEOK; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 542

Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName =111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkP hone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=s ample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IFFNLOIBMMBLGFAHFHDAANOL; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 812 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CGENLOIBABEJBPHJKGDALGNB; path=/ Cache-control: private

Acunetix Website Audit

543

/formpage.asp Details The POST variable ZipCode has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DGENLOIBGDEHFLGOLGAEIGFK; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 544

Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BGENLOIBLDHAAMFKDLBMHAIE; path=/ /formpage.asp Details The POST variable ZipCode has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LIBNLOIBEKGIONJDFNIGCHEJ; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 Acunetix Website Audit 545

933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KFENLOIBOCBKOBGMNMPEKLBK; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 813 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JICNLOIBBDHAIIBIOGGBGKLB; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 546

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LICNLOIBKGGHANIOGGKHHNOD; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KICNLOIBOMHHJPMHDHMFMFLP; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to \" . Request Acunetix Website Audit 547

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IICNLOIBIGAMEMFJKPHJNPJF; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 548

Set-Cookie: ASPSESSIONIDCCSSQBCR=DICNLOIBNHCLNCBOMGBJGCGH; path=/ /formpage.asp Details The POST variable ZipCode has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GICNLOIBLOOADDCFJAGJECCK; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 549

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HICNLOIBIHDPOFCJOEHGOLOH; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PEFNLOIBCMIFNJAGCEHHAEBN; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 550

...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AFFNLOIBNOMJJMHGCLAJHNAO; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 811 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=BFFNLOIBDPFJJFEEBOPBFLCF; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 815 Acunetix Website Audit 551

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NEFNLOIBMIJPHJCBDEKOHMIK; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MICNLOIBPPIIGKAFANLBMHAP; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to ' . Acunetix Website Audit 552

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NICNLOIBCOLINIMCNGILHHLH; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 553

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OICNLOIBCJBKLAADCEMFPGMF; path=/ /formpage.asp Details The POST variable ZipCode has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DHDNLOIBNEHBMKDEAIFMHEPE; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 798 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Acunetix Website Audit 554

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FHDNLOIBEMOPGKHOHGCMMHIB; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 802 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EHDNLOIBMEMKOFFEGODKOLLG; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 801 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 555

(line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GHDNLOIBNCDEEMKLHAGCBDBO; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KHDNLOIBBIFEMLFNJLLAHKID; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 556

Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IHDNLOIBJDCOFMFBBDPGIEME; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 799 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HHDNLOIBAKAEIHHNLDGJJPKD; path=/ Cache-control: private

Acunetix Website Audit

557

/formpage.asp Details The POST variable ZipCode has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FGENLOIBBNJMHHGFBCLEPFDN; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...arentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-1 933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-2 22-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40em ail%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 558

Connection: close Date: Thu, 21 Jun 2012 17:32:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HGENLOIBEMDGCLKFICEICJPK; path=/ /formpage.asp Details The POST variable ZipCode has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PGDNLOIBEAENLBIDEGIOAHPC; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to %00' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 Acunetix Website Audit 559

2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Ye s&ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@addres Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PIBNLOIBFLPCODIGHHFDNFIN; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to \' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MJBNLOIBOEHOIAJNBPOPNPGB; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 560

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AGENLOIBGNHLBFADECMEEFIC; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 800 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...am=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=11 1-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhon e=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=samp le%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AHDNLOIBKOJFEFEEJABOILLN; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to acunetix'" . Request Acunetix Website Audit 561

POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 816 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OFENLOIBODNJNANFHKOBFBCG; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 807 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Acunetix Website Audit 562

Set-Cookie: ASPSESSIONIDCCSSQBCR=LFENLOIBIONIGOGBLEIOMCLC; path=/ /formpage.asp Details The POST variable ZipCode has been set to %2527 . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 809 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OIBNLOIBLABJECPJCNOJKIID; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to acunetix'" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 814 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response Acunetix Website Audit 563

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IJBNLOIBNGLHLIMMOMOKIMBP; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 797 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ogram=Yes&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastNam e=111-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWork Phone=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email= sample%40email%2Etst&how=TV&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JIBNLOIBPJLEHDKEKLBNEPMN; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to \" . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 806 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) Acunetix Website Audit 564

...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JJBNLOIBKLJMPJGEHCBACPOM; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 805 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MIBNLOIBEACDDBFKIGCOOPIN; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 803 Acunetix Website Audit 565

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...ram=No&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=1 11-222-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPho ne=111-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sam ple%40email%2Etst&how=Flyer&tvch=None&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PHDNLOIBHIANFCLFCOMNFGJI; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to JyI%3D . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 810 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222 -1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111 -222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40 email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KJBNLOIBOPHBOJHLCDKFKKFC; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to \' . Acunetix Website Audit 566

Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 808 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...rentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-222-19 33email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=111-22 2-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%40ema il%2Etst&how=Flyer&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=Yes &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:32:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PFENLOIBOCHIBJMMBDGFDECO; path=/ Cache-control: private /formpage.asp Details The POST variable ZipCode has been set to ' . Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 804 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm (line truncated) ...s&ParentGuardianFirstName=111-222-1933email@address.tst&ParentGuardianLastName=111-22 2-1933email@address.tst&ParentHomePhone=111-222-1933email@address.tst&ParentWorkPhone=11 1-222-1933email@address.tst&ParentCellPhone=111-222-1933email@address.tst&email=sample%4 0email%2Etst&how=TV&tvch=ABC%20Family&ApprovalofAdvantagePointLearningasmySESProvider=No &ElectronicSignature=111-222-1933email@address.tst&FormAction=111-222-1933email@address. tst&FormID=1&Referer=http%3A%2F%2Fwww%2Eadvantagepoint%2Eorg%2F Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 17:31:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 347 Acunetix Website Audit 567

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LJBNLOIBDNKKCJDCIDMCGNLC; path=/

Application error message


Severity Low Type Validation Reported by module Parameter manipulation Description
This page contains an error/warning message that may disclose the sensitive information.The message can also contain the location of the file that produced the unhandled exception. This may be a false positive if the error message is found in documentation pages.

Impact
The error messages may disclose sensitive information. This information can be used to launch further attacks.

Recommendation
Review the source code for this script.

Affected items /page.asp Details The GET variable Print has been set to 0xffffffff . Request GET /page.asp?NavID=19&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GOIMLOIBAAIKNAFOIOIKPJOM; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x80000000 . Request GET /page.asp?NavID=19&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix Website Audit 568

Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=AOIMLOIBBOCNCFPJCDNBBCPG; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0xffffffff . Request GET /page.asp?NavID=26&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LNIMLOIBGNKOPKDAPIDAKPBG; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /page.asp?NavID=58&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Acunetix Website Audit 569

Set-Cookie: ASPSESSIONIDCCSSQBCR=KPIMLOIBLMBHNKHPMEJBDOOL; path=/ /page.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /page.asp?NavID=58&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EPIMLOIBOKLJPGHHENGDBNGE; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /page.asp?NavID=33&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LOIMLOIBLOFCLMJOLJBNGCNI; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x80000000 . Request GET /page.asp?NavID=58&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 570

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HPIMLOIBMELEBIIJPJBNAMFD; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0xffffffff . Request GET /page.asp?NavID=58&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FPIMLOIBOBBBBEFGEEGKKBNO; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to NULL . Request GET /page.asp?NavID=58&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:49 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 571

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=GPIMLOIBBLMMDOGNGNPMCNOD; path=/ /page.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /page.asp?NavID=33&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OOIMLOIBOFLCLLEJNFMKLILL; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /page.asp?NavID=19&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EOIMLOIBIENHGKHPNCHCDJCD; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /page.asp?NavID=19&Print=0x3fffffff HTTP/1.0 Acunetix Website Audit 572

Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FOIMLOIBHKCMACPMEFBGKOAB; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to NULL . Request GET /page.asp?NavID=19&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=COIMLOIBADNDCNICAPGPOLKK; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x80000000 . Request GET /page.asp?NavID=33&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 573

Connection: close Date: Thu, 21 Jun 2012 16:37:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=POIMLOIBCLMFNAMAKDIMNPOG; path=/ /page.asp Details The GET variable Print has been set to NULL . Request GET /page.asp?NavID=33&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=APIMLOIBJAGAEFOLBCFIIJJI; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0xffffffff . Request GET /page.asp?NavID=33&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JOIMLOIBPLEIOHAODJACFOEB; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x3fffffff . Acunetix Website Audit 574

Request GET /page.asp?NavID=26&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FNIMLOIBPIPIJGCIKFHAHJFE; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x80000000 . Request GET /page.asp?NavID=18&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NEIMLOIBCGBKBINDIPCLDAAD; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /page.asp?NavID=18&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 575

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MEIMLOIBMOKLDBIOOGPGGDKI; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /page.asp?NavID=18&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OEIMLOIBMKEACGNBEPOIBMKF; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /page.asp?Print=0x3fffffff&cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LGIMLOIBBELHOEKGCCFKLPAL; path=/ Cache-control: private

Acunetix Website Audit

576

/page.asp Details The GET variable Print has been set to 0xffffffff . Request GET /page.asp?NavID=18&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=PEIMLOIBGMBAFMBEDJNICNDE; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to NULL . Request GET /page.asp?NavID=18&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LEIMLOIBIEDJPPNJEDPFMBNP; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /page.asp?Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix Website Audit 577

Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=HDIMLOIBMLCGNOJMCJHKELKF; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to NULL . Request GET /page.asp?Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=IDIMLOIBGIEMLDHBEAINAHON; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x80000000 . Request GET /page.asp?Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Acunetix Website Audit 578

Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=JDIMLOIBADOOMEKOFPDBNBEA; path=/ /page.asp Details The GET variable Print has been set to 0xffffffff . Request GET /page.asp?Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=LDIMLOIBGOLDJPBDCGLBOAHD; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /page.asp?Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KDIMLOIBCCBOELBFCFCKLBBK; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to NULL . Request GET /page.asp?Print=NULL&cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 579

Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=KGIMLOIBCHADNEEDDIJHKEEO; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0xffffffff . Request GET /page.asp?NavID=73&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=FMIMLOIBGHPDGMPFHONIPNKJ; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /page.asp?NavID=73&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:45 GMT Acunetix Website Audit 580

Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EMIMLOIBBCNCOJHNMPBGNIJB; path=/ /page.asp Details The GET variable Print has been set to NULL . Request GET /page.asp?NavID=26&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NMIMLOIBDFCNFCEGKCPIBCGC; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x80000000 . Request GET /page.asp?NavID=26&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=ENIMLOIBCHEHADAIIAOBGPFD; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x7fffffff . Request Acunetix Website Audit 581

GET /page.asp?NavID=26&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DNIMLOIBMCGHLKCIFGKAFBIH; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x80000000 . Request GET /page.asp?NavID=73&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=EKIMLOIBEJBEBNFDJDGAPNPF; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /page.asp?Print=0x7fffffff&cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 582

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=NGIMLOIBGHFAPPJADDLBOCKE; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0x80000000 . Request GET /page.asp?Print=0x80000000&cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=MGIMLOIBLONEKFAIBGFPEPPG; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to 0xffffffff . Request GET /page.asp?Print=0xffffffff&cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=OGIMLOIBJNEGOGKGBLABNEKJ; path=/ Cache-control: private

Acunetix Website Audit

583

/page.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /page.asp?NavID=73&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=DKIMLOIBCHANDLIJEHDIMCDB; path=/ Cache-control: private /page.asp Details The GET variable Print has been set to NULL . Request GET /page.asp?NavID=73&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 16:37:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Set-Cookie: ASPSESSIONIDCCSSQBCR=CKIMLOIBLBBOFFBIHNNACJLI; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 584

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:37 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ECONIOIBMKEEAKALLHEJKBLM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:37 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OBONIOIBPMFLGLCEKACMOCNL; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 585

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:37 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FCONIOIBEECMPCMHPIHJOFAN; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:37 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DCONIOIBEHLALCOPIJICEIHO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=0xffffff ff&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Acunetix Website Audit 586

Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DJMOIOIBABFOOJHCPKCBHMGF; path=/ /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=0x80000000&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CNNNIOIBNKFODFIMLEJHNHKC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=0x3fffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BNNNIOIBIIHBLIGICDBGOFNJ; path=/ Cache-control: private

Acunetix Website Audit

587

/searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=0x7fffff ff&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CJMOIOIBNEBOIFGFJIBNJBCP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=0x800000 00&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BJMOIOIBJDOGLKMIGOKEMEED; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request Acunetix Website Audit 588

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=NULL&Print=Tr ue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:41 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ONONIOIBPJMHKOCIMLDLPCLP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:41 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KNONIOIBOHEGIOGPNAFIOBKD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=0x7ffffff f&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 589

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GJLOIOIBGBMGDAPEJPIPOECA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=NULL&Print=T rue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IALNIOIBBLLBDBJHEOAEIGEJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=0xffffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 590

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:41 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FNONIOIBMFKHLFLEFBMAGKAD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=NULL&Print= True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JAGNIOIBGDPJKBECBNJBJLCH; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=0x3ffffff f&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:16 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 591

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EJLOIOIBDLDOMBNNEGFJADNC; path=/ /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=0x7fffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:41 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ENONIOIBOEKFMHKKCDMFDLNP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FAGNIOIBKKEIGNIJAOHALCCC; path=/ Cache-control: private Acunetix Website Audit 592

/searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:23 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:23 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IOMNIOIBBOKBGPMOFMOPKGFC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:23 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:23 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HOMNIOIBHOEJPMEPAKPDBAOL; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request Acunetix Website Audit 593

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IKINIOIBOHFCBOGKIGABCOLN; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=NULL&Print= True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:06 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AJOMIOIBPINDFLBBGJNCALBM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 594

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:23 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:23 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GOMNIOIBNMBLIAOKOKBINALP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:23 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:23 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PNMNIOIBMPIPIEOJLHMCDKOJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=0x3fffffff& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 595

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KAGNIOIBDOEFPCPJAJBDDCHD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:23 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:23 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DOMNIOIBNLFANLCPAONIMFEM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:23 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Acunetix Website Audit 596

Expires: Wed, 20 Jun 2012 17:17:23 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=COMNIOIBOGOMBLKLIKMAEHKC; path=/ /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=0x80000000 &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BKINIOIBIHLKLIPAOGPNLBOJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=0x3fffffff &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CKINIOIBPBLPJJIHABDLOGHH; path=/ Cache-control: private

Acunetix Website Audit

597

/searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=NULL&Print=T rue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ANNNIOIBDIHMDBDFGJLHNJMD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LMNNIOIBCABONAHLHEAHGHFA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request Acunetix Website Audit 598

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=0x7fffffff &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DKINIOIBIBEAEJFFFJNLLMNJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=0x8000000 0&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FJLOIOIBIBCOKKAPMGIJPCMM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=0xffffffff &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 599

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EKINIOIBGADKJAMGLODGBEBJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=0x3fffff ff&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AJMOIOIBHLLFMIECLHDFGILG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=NULL&Pri nt=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 600

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PIMOIOIBGMCGJNAHGFOKMEEC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=0xffffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DEBNIOIBNPPGLLPKLANJCMDA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Acunetix Website Audit 601

Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BHEOIOIBACAOIILGIKMIJFFF; path=/ /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IEINIOIBELNPHPKLNPAIEADA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=0x7fffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BEBNIOIBIKCMGHAIFJJKBCFE; path=/ Cache-control: private

Acunetix Website Audit

602

/searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GHEOIOIBHBABICIBNMCFPPJO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FEBNIOIBNJJEBHMJLGANFING; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET Acunetix Website Audit 603

/searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=0xfffffff f HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:35 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BPHOIOIBDBLLLIPIICHBDIKI; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HHEOIOIBJOJJGPNMMDJPALDC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 604

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:50 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IHEOIOIBCCEAKIGIKJLNHCFC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HOPNIOIBBNGELBIHPCMMKPIG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=0xffffffff&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 605

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FOPNIOIBCJLCBGOKENMIBGLD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=&Print=Tru e HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CKDOIOIBDGJCFNOGHIDGMFJG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=NULL&Print =True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Acunetix Website Audit 606

Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IKDOIOIBGHCMEDAHJIAJFMII; path=/ /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=0x80000000&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EOPNIOIBLFAAKDNIOICNMLNA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=0x3fffffff &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KKDOIOIBDPAAMJIGKOPDKEEO; path=/ Cache-control: private

Acunetix Website Audit

607

/searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=0x80000000 &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LKDOIOIBHAMFBGGBAFIJNFCB; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=0x3fffffff&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DOPNIOIBDFGDKJPIBLBOCKPC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request Acunetix Website Audit 608

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=0x7fffffff&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BOPNIOIBKAOKCGMNNDOKJLCO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=0x7fffffff &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:57 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HJEOIOIBKBEOFELAHPLGAKBD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=0x7ffffff f HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 609

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:35 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=APHOIOIBIDBNGJCAELLMFIFP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=0xffffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LALNIOIBHIKGEIFEKLCLNDPJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=0x3fffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 610

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HALNIOIBHDLOBNFBBJHAGEGG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IEPNIOIBDEEINBAPMPGGMHEN; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Acunetix Website Audit 611

Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PDPNIOIBJINACKPDPJHOOGAO; path=/ /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=0xffffffff &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:57 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IJEOIOIBPJGDPHLOIFKFILJN; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DEPNIOIBFEDMMHCPMDPJKHLJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Acunetix Website Audit 612

Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AEPNIOIBGELMLIAJEECGENJM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BKBNIOIBMJCFCIKKNLCEMDOO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=NULL&Print=T rue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 613

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OHDNIOIBAOLBLHIMKMKPDJFP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=0x80000000&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AIDNIOIBCJMDELJNLIBNLINM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=0x3fffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 614

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PHDNIOIBMGCGCGDGHMMINBHL; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GMOMIOIBABNNLFMIIBIHBLDO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Acunetix Website Audit 615

Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NMOMIOIBIHDIBKDPPAFNAPDM; path=/ /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HEINIOIBEBAJNCDGOMGCLCOF; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LMOMIOIBPILPGIMOHCNOJBFJ; path=/ Cache-control: private

Acunetix Website Audit

616

/searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MMOMIOIBDEDNCFIONCIAGEBK; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=0x3fffffff& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:06 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BJOMIOIBFPELOLADHNKCIKMJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET Acunetix Website Audit 617

/searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=0x7fffffff& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GKCNIOIBHDOBFJDMAMFAADAO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=NULL&Print= True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EKCNIOIBGDDACPMLBPGFENNK; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 618

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JOJNIOIBEMACKILJOAIMEFGC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=0xffffffff& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HKCNIOIBCJPKFOKCNFFGFMLI; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=0x3fffffff& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 619

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DKCNIOIBKFIHNBMMDKMKBLIF; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FLHOIOIBMJNBMPCJKGPMFBNI; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Acunetix Website Audit 620

Expires: Wed, 20 Jun 2012 17:19:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DLHOIOIBEFMIGEHDLBABNOMH; path=/ /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=0x80000000& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BKCNIOIBBLNELHNNGOBAFAJM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NJBNIOIBPHBKIECKFNPLHIHN; path=/ Cache-control: private

Acunetix Website Audit

621

/searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=&Print=Tru e HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JKIOIOIBJCIPIPFPKHDNKDGA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=NULL&Print=Tr ue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=COJNIOIBKLHDHEIMOOLNHDDN; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request Acunetix Website Audit 622

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OJBNIOIBLFHHMCACFCNCCIOO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=NULL&Print =True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PKIOIOIBEHAPNOFEGMPPBLOC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=0x3fffffff&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 623

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DOJNIOIBCKBCCAAPEGDJFFBO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=0xffffffff&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GOJNIOIBKELGPHEACHJJIPMH; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 624

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KKCNIOIBFDMIEENLKPKJFDEC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=0x80000000&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EOJNIOIBGKLAMOCKCPEPJHIE; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=0x7fffffff&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:45 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 625

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FOJNIOIBDHLCCMOJHDAAELKL; path=/ /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=&Print=Tr ue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FMGOIOIBABFJEHPCKHCOBEEE; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=NULL&Prin t=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:27 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GKHOIOIBNDNNCLNNMMNNEFIA; path=/ Cache-control: private Acunetix Website Audit 626

/searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=0x80000000 &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CMGOIOIBAPLMAGBNJDPFHGOM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=0xffffffff &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DMGOIOIBDABJAKFCPNPNCOHP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request Acunetix Website Audit 627

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=0x3ffffff f&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:27 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IKHOIOIBLEIAOFBLOOEFDPMC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=0xfffffff f&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:27 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MKHOIOIBJFGAJFHDILBNMEKN; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 628

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OKHOIOIBFKABEJCNNBBLPOIE; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=0x8000000 0&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:27 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JKHOIOIBOOLBMDPLIIPICJON; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=0x7ffffff f&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 629

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:27 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KKHOIOIBBNNEMNPBAFEGBCED; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KJBNIOIBCKAAKHJIMEGGDANH; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Acunetix Website Audit 630

Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ALHOIOIBAHPKEAPLOOMLHPHK; path=/ /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CLHOIOIBGDBNLDODCEAFILIN; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BLHOIOIBLFDCKDICEMFMJHBK; path=/ Cache-control: private

Acunetix Website Audit

631

/searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MJBNIOIBJGNJANHDFMKOJKDE; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=0x7fffffff &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AMGOIOIBCCIIPCCCFODHEAMJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request Acunetix Website Audit 632

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NKLNIOIBDDHKIAGJNBKIPDGN; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OKLNIOIBKBGDIHMEFHBELOCP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 633

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PKLNIOIBLFCPEBGAGCKCNICO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=0x7fffffff&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:15 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GKMNIOIBICJNMHANEDKFLGGH; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 634

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:15 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CKMNIOIBEHEIHPCCGNMCDBLC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=0x80000000&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:15 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IKMNIOIBBNHOHLDLMOLFNHBC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=0xffffffff&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:15 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 635

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:15 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JKMNIOIBKGDJACALGAEEMKNC; path=/ /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NKJNIOIBJALBIGCDHENMMMFC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CLJNIOIBECHKDEAIMHHDACIA; path=/ Cache-control: private

Acunetix Website Audit

636

/searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=0x80000000& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LAGNIOIBCAIBFFBLPBPJDIPG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OKJNIOIBKKECJNCCPDDAJCIE; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request Acunetix Website Audit 637

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PKJNIOIBEPECKDGJAFPLEFNL; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=0xffffffff &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CLIOIOIBNFKBPDHJHMLHPOCM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=0x7fffffff &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 638

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BLIOIOIBNNLFEPAIIJNDGPDD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=NULL&Print=Tr ue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:15 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LKMNIOIBOGLOPDOHDKAKPCGB; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=0x80000000& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 639

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:06 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OIOMIOIBGJOFGLCLJABGBEDJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KIOMIOIBDOKFGOCGJPOAIKFK; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=0x3fffffff&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:15 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 640

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:15 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KKMNIOIBCKOANCOJPBJFOEDM; path=/ /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ABDNIOIBONACJFPEGPJOIFBE; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MKJNIOIBEOKABEKAIEPCDJDI; path=/ Cache-control: private Acunetix Website Audit 641

/searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EBDNIOIBNODEGDAINEBOCHMH; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NADNIOIBBHBFKNJBJPGNNEIL; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=NULL Acunetix Website Audit 642

HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:01 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LADNIOIBOAFDHGJCCFNIGLOL; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PADNIOIBMDJDKAGNLKMJDPAD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix Website Audit 643

Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OADNIOIBFGDMFGJBBBADMBBL; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=0x8000000 0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:35 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=POHOIOIBGKCLMFBNHOGMBPNB; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=0x80000000 &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 644

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ALIOIOIBCLPAAAODAPHJEEDE; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=0x3fffffff &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OKIOIOIBNCAPHLFFOIOEEILI; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=0x3ffffff f HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Acunetix Website Audit 645

Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:35 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OOHOIOIBBFDGECPMDNJACPHN; path=/ /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:35 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NOHOIOIBGNLMCDDICBPPGOOH; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=NULL&Prin t=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:57 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DKEOIOIBHNIAJKDBLCNBCOIG; path=/ Cache-control: private

Acunetix Website Audit

646

/searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NGFOIOIBKJOLDAFHNJPKLNBC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=NULL&Prin t=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KKKOIOIBFLPFJCPNEAIAIBOE; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request Acunetix Website Audit 647

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=&Print=Tr ue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:57 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MJEOIOIBPHDHFPAKCJJOAMMH; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AHFOIOIBCDODONPDFPOKPAHJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 648

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HHFOIOIBKLBFCDKPELGFABBI; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=0x3fffffff &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BMGOIOIBFFJOBPDPFDOCPBKO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 649

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CHFOIOIBKACEPEONDFELLCDM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=NULL&Print =True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PLGOIOIBGGCNFKEJAKFNDDJG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Acunetix Website Audit 650

Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CGMMIOIBKIDINOAACOMPLJKJ; path=/ /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BGMMIOIBACGIEPAAJBHPFHEO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=0x3fffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:18 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LHBOIOIBBJLHENPGNHMGEEEO; path=/ Cache-control: private

Acunetix Website Audit

651

/searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=NULL&Print=T rue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:17 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JHBOIOIBMEJFAOIEKFHBIOIB; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FGMMIOIBHCGKJFFPAAPKNJFO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request Acunetix Website Audit 652

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:25 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:25 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NCANIOIBDOEEHLPPIOMLMABA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LFMMIOIBGMHCJDKJMHOHJDLP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 653

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:25 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:25 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OCANIOIBEBMPKJPDGOGHIMCN; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=0x80000000&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:18 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MHBOIOIBJJFOIIGADFONHPLN; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 654

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:19 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PLBOIOIBOBLFGNIBMBCLMJCL; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=0x7fffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JALNIOIBIPCCEOKEAHDMLKLO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Acunetix Website Audit 655

Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:00 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EAHNIOIBPDIEOJIJHLEALPHE; path=/ /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:19 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AMBOIOIBNPJLHCEIAMJKKMOD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=0xffffffff& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FFHNIOIBNBPLFHBPCCLDNGAA; path=/ Cache-control: private

Acunetix Website Audit

656

/searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=0x7fffffff& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GFHNIOIBKOCPLEGPJGLLBKCD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=0x80000000&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KALNIOIBOCKJJCPCDFICBDAD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request Acunetix Website Audit 657

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:42 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PKFNIOIBNBBCMCDJMHPAONGN; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:25 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:25 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ADANIOIBGOHABOFIHPAINPAI; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=0x3ffffff f HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix Website Audit 658

Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:14 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JGGOIOIBKMNJJEMKMIIFPJPG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:57 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HHLNIOIBFPKBMNOFCPKLBGOJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 659

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:57 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GHLNIOIBEJHBPMHKKLOJMDEB; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EMBOIOIBJMAFJFEABFFLAPHK; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Acunetix Website Audit 660

Expires: Wed, 20 Jun 2012 17:18:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MJCOIOIBFHBONKPPAELLBLGG; path=/ /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=NULL&Print= True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AKCOIOIBJBKHJBKIGEDANOLK; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:57 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IHLNIOIBEPBDJLBCPFCOJHPI; path=/ Cache-control: private

Acunetix Website Audit

661

/searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LHLNIOIBKNCBGBIFKHKIAFKA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BMBOIOIBBGAEONJLMPAIJCEF; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET Acunetix Website Audit 662

/searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:57 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FHLNIOIBILIKOPEDDNBJBAOK; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CGCOIOIBPCNFJLEFDBMCFLOI; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix Website Audit 663

Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:25 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:25 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GDANIOIBOJCMFMJDECJCCNGB; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:57 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:57 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EHLNIOIBKKIFJCFPBEBFDIPL; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Acunetix Website Audit 664

Date: Thu, 21 Jun 2012 13:18:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FGCOIOIBJEGGMBCGJDGFFHIA; path=/ /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GGCOIOIBNJEMIIOGGICFNHLC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:24 GMT Acunetix Website Audit 665

Set-Cookie: ASPSESSIONIDCCSSQBCR=DGCOIOIBFJEEEELLOMEECNFA; path=/ /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EGCOIOIBPEJLDEJDJDPOCBHD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:00 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DAHNIOIBBLHHIOEBKIDIDICN; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Acunetix Website Audit 666

Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=0x8000000 0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:00 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MOJOIOIBEHJAJPFMBGDDLCEA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=0x3ffffff f HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:00 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LOJOIOIBNHDNLBJDLOPOOMPE; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=0x7fffffff& Print=True HTTP/1.0 Accept: */* Acunetix Website Audit 667

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:22 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AAANIOIBOBIEPCDLEKBOBNKD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=0xffffffff& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:22 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PPPMIOIBCMLJECBOAGKPMGOB; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=0xffffffff& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix Website Audit 668

Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HNENIOIBAKNNHBNFBCOMGBAE; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=0x80000000& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GNENIOIBNKBJLJFLPHCJCFFB; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:00 GMT Acunetix Website Audit 669

Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:00 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KOJOIOIBCBFOKOAGNGLLICMB; path=/ /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:00 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EOJOIOIBBELGEHLBIONCKLMO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=0xfffffff f HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:12 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AOKOIOIBGDCILMLGGJNAJFPN; path=/ Cache-control: private Acunetix Website Audit 670

/searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=0xfffffff f&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CKKOIOIBALMFFNKCCAPKHFGF; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=0x7ffffff f&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BKKOIOIBDFFNBIFMLJKJLCEG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request Acunetix Website Audit 671

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:42 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LKFNIOIBJPDBCNOBKFGBGBNE; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=&Print=Tr ue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FKKOIOIBMEPFIMIOKIPIMKAL; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=NULL&Print=T rue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 672

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:22 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JAANIOIBGGFPIPBKNHCNLPHJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=0x7fffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:18 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NHBOIOIBOBHOIAMLLPGFCCIK; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 673

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:22 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CAANIOIBENOGAKAEGEMDFKKP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=0x7ffffff f HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:12 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PNKOIOIBPFILNHMDHEMAILCL; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=0x7fffffff& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Acunetix Website Audit 674

Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FNENIOIBFFNCIIIMEKMEMNKA; path=/ /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=&Print=Tr ue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FKJOIOIBECEDJONEMMJBJPDM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=0x7fffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:48 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OPMMIOIBLDIBDJHJDOMLILGK; path=/ Cache-control: private

Acunetix Website Audit

675

/searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:19 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OLBOIOIBIPBGBBFLHIKJIAID; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=NULL&Prin t=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KKJOIOIBNEGPFPGDCKBAMDFM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page= Acunetix Website Audit 676

HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:00 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OPGNIOIBPHGOJAPFHJNOENNK; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:00 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BAHNIOIBHOIPAIOCMNGPBBCH; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=0x80000000&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix Website Audit 677

Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:48 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LPMMIOIBBKNFLHBOILBFLPLH; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NOIOIOIBCAALDPLJOAGKHLHJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=0xffffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 678

Connection: close Date: Thu, 21 Jun 2012 13:18:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:18 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OHBOIOIBBKLDDFAFIHFAGJIM; path=/ /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OMENIOIBBOGOIKOLILKFOKPG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=0x8000000 0&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Acunetix Website Audit 679

Expires: Wed, 20 Jun 2012 17:19:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MKJOIOIBPKPNMLCKMLKKJBIH; path=/ /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=0x3fffffff& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ENENIOIBBPEMDMJCMFNDCIFM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=NULL&Print= True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DNENIOIBPPNOFAPMCLAJAACP; path=/ Cache-control: private

Acunetix Website Audit

680

/searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:12 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HOKOIOIBENIKAKIBKKMDAMGK; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=0x3ffffff f&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LKJOIOIBNBLFCBMOFHKOJECI; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET Acunetix Website Audit 681

/searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EGMMIOIBMNPJNMLOLOIBPFJD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:12 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EOKOIOIBIHHHLAACHKOADMCI; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=0x3fffffff& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix Website Audit 682

Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CKCOIOIBJKMNGPOJKMIBFCAI; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:37 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GHDOIOIBDMOCAPIHIFCGBADM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 683

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:37 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HHDOIOIBJEIJCAAPNMADBCFD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:37 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DHDOIOIBKCHCBCMGNOPJFMON; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Acunetix Website Audit 684

Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:37 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EHDOIOIBBKNCCPCMCPLNOEGL; path=/ /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:36 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JOMOIOIBNPAMOHCPHKBGDFDG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=0x8000000 0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AOLOIOIBELJODMMNGCMGAMAN; path=/ Cache-control: private

Acunetix Website Audit

685

/searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=0x3ffffff f HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ONLOIOIBELIMNAJHFFJBBPPF; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=0x3fffff ff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:36 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KOMOIOIBJDPEJAOKILNNAPJF; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request Acunetix Website Audit 686

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:37 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CHDOIOIBOOGKNKDJAECEHLAH; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=NULL&Print =True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OFHNIOIBLKNNOEONGGDPFPLK; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=0x7fffff ff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 687

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:36 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MOMOIOIBEFBIEKDHCJEPNCIG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=0xfffffff f&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HJLOIOIBDJDPFEADPBNBIICL; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=0xffffff ff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 688

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:36 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NOMOIOIBOFHKCKLDBFPPGKEC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:14 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PGGOIOIBNJHIEMBBNKCKPJEB; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:37 GMT Acunetix Website Audit 689

Set-Cookie: ASPSESSIONIDCCSSQBCR=OGDOIOIBIMKEPCAKPMGGBIJF; path=/ /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=0xfffffff f HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:14 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MGGOIOIBLECDEENKHPOBJDLM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=0x800000 00 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:36 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LOMOIOIBFFGCCIPJIJGGMHNI; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Acunetix Website Audit 690

Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LPAOIOIBLJBPJHHIIBFDHAGL; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:04 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FFAOIOIBBBCIGCJFBBANJHKF; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=0x7fffffff HTTP/1.0 Accept: */* Acunetix Website Audit 691

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:04 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EFAOIOIBLBGPPNIMIPEGDFBH; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GOLOIOIBNLDAHDMOKLHOKJAB; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 692

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:04 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IFAOIOIBEHILLDLLBHJBDIHH; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=0x3fffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PDBNIOIBFHMMNBOMMNMJJPJE; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=0x80000000&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:38 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 693

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AEBNIOIBAKIIEIAPCBCCDCAE; path=/ /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:04 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DFAOIOIBBADBDEMBBIJEJJGG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:04 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CFAOIOIBFILNOEGAHBPLADMA; path=/ Cache-control: private Acunetix Website Audit 694

/searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=0xfffffff f HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BOLOIOIBEEELJAPNIDLEMBPD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=0x80000000&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HPAOIOIBIBLFHCGKKCJBKAND; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request Acunetix Website Audit 695

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=NULL&Print=T rue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GPAOIOIBABPIGPBLDLNKPGOO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=0x7fffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JPAOIOIBELOPHDCEEEMBNPON; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=0xffffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 696

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IPAOIOIBGBEMOJDDIKLPLHDF; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LEINIOIBHOBGPMJMLJMLHGKO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 697

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PEINIOIBPFAPJNGPEFHLPAEJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=0x3fffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FPAOIOIBCPBLGIMLDEAKLNPP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=0x7ffffff f HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Acunetix Website Audit 698

Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PNLOIOIBJPPAIKDILCIFLOCL; path=/ /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=&Print=Tru e HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JFHNIOIBMKBGOJJHPNMDLHFM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FFENIOIBPLCOBAOFHMFLFOOF; path=/ Cache-control: private

Acunetix Website Audit

699

/searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DFENIOIBNOEBEFDGJJOONOHP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HFENIOIBEAPEMBBCCACNIICA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request Acunetix Website Audit 700

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DGMMIOIBDAHMNBEIHLPGLPCA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=0x7ffffff f&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BKFOIOIBMFGDGKNIAEIBCLML; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=0x3ffffff f&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 701

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AKFOIOIBLJOEAKCDPKBKBIIK; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EFENIOIBEAKEMPINCHLENCIG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=0x8000000 0&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 702

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CKFOIOIBPDNFMMNOEBMKDMJG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JFENIOIBPNPNAKLCBOJCNOEE; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=0x7fffffff& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:31 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 703

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EKCOIOIBNKMDIDEGBIAKIPGF; path=/ /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LKLNIOIBCPICCLCMKBDEIKCH; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FMBOIOIBCPDLCEEEHNIMCCHF; path=/ Cache-control: private

Acunetix Website Audit

704

/searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=0x80000000& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DKCOIOIBBLIICEDCCGGJKEGA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MKLNIOIBOMNGGCMDOABDNNMD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request Acunetix Website Audit 705

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=&Print=Tru e HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FKFOIOIBONFABCLIDPCACHNA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=0xfffffff f&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GKFOIOIBDGPDNELINNBLHOCA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=0xffffffff& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 706

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GKCOIOIBHNNJKHHFOIEAMDOO; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=0x8000000 0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:14 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KGGOIOIBILEBLMBCIPCHBHMB; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=0x3fffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 707

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KPMMIOIBFFMJDFJMBGIDDOEP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=NULL&Print=T rue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JPMMIOIBAPKDHKGKFFNLLENI; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:42 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 708

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:42 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DLFNIOIBENDLLAJIEDFEFEIO; path=/ /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:42 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FLFNIOIBJFPIIDKJOAOJCNDA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=0x7fffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BIDNIOIBDKMAEOIGOLAIFPKL; path=/ Cache-control: private Acunetix Website Audit 709

/searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=&Print=T rue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KJLOIOIBAIJEGENPGIGDNLFA; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=0xffffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FIDNIOIBAMHHNPMLEIJNBPCI; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to . Request Acunetix Website Audit 710

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DPMMIOIBNOPNLLCKJFEMJMAF; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=0xffffffff&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:48 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MPMMIOIBDJHBEDEMLCHIIFCG; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 711

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MOIOIOIBNPBCKNLAAEFJDEJP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LOIOIOIBGDLDEINNPIEKGLFD; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=0x7ffffff f HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 712

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:14 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:14 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LGGOIOIBDFPOAFLJJLCGMLPM; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OOIOIOIBJFMIFIJHBNHPEHKP; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Acunetix Website Audit 713

Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KOIOIOIBFHBNNJDAGHKMPAAF; path=/ /searchresults.asp Details The GET variable Page has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FOIOIOIBNIGIHMCKMIICJGCC; path=/ Cache-control: private /searchresults.asp Details The GET variable Page has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:42 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CLFNIOIBJEFJOAADDDCPJKNK; path=/ Cache-control: private

Acunetix Website Audit

714

/searchresults.asp Details The GET variable Page has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:42 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BLFNIOIBLHOOHDOGPJILJPAI; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=NULL&chkTool=on&cmdSearch=SEA RCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:52 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LMKNIOIBGJDAPBDAMCKDPDCA; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request Acunetix Website Audit 715

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BPJNIOIBGDCPEJEGJADNJDJM; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x7fffffff&chkTool=on&cmdSear ch=SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=APJNIOIBGGGOMPFACLKOHLAJ; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x3fffffff&chkTool=on&cmdSear ch=SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 716

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:52 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MMKNIOIBNCLKJABOFBJDDEJA; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0xffffffff&chkTool=on&cmdSear ch=SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:52 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PMKNIOIBJFHLACACADLINEFM; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x7fffffff&chkTool=on&cmdSear ch=SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 717

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:52 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OMKNIOIBFHILCDEKBDHPENEE; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x80000000&chkTool=on&cmdSear ch=SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:52 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NMKNIOIBIJKNBKEPGGECFBEJ; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0xffffffff&chkTool=on&cmdSear ch=SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:46 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 718

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=POJNIOIBDLCMDMFNCMHNAOMF; path=/ /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=NULL&chkTool=on&Page=0&Print=Tr ue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DOMMIOIBJPOOGHDCDCGBIBKC; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x3fffffff&chkTool=on&Page=0&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EOMMIOIBLHHHMACNIDMNLFNH; path=/ Cache-control: private Acunetix Website Audit 719

/searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=NULL&chkTool=off&Page=0&Print=T rue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LHOMIOIBNOCMIOAFINMOFONH; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x3fffffff&chkTool=off&Page=0&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MHOMIOIBOGPAJDNGFEJLGINB; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request Acunetix Website Audit 720

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x80000000&chkTool=off&Page=0&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OHOMIOIBFFJJNHLCHEHPHACI; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x3fffffff&chkTool=on&cmdSear ch=SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ABLNIOIBNJAHFIHPMEBBHACP; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=NULL&chkTool=on&cmdSearch=SEA RCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 721

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BBLNIOIBKEDDCFKHFAJAFLEB; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0xffffffff&chkTool=on&Page=0&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HOMMIOIBGFAPLDHPNKMMLBOF; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=&chkTool=on&Page=0&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 722

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:22 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IPPMIOIBMPGIIDCOPMFOHFKI; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x7fffffff&chkTool=off&cmdSearch =SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PFHNIOIBNNOBAIJBGMOGNAAL; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=NULL&chkTool=on&Page=0&Print=Tru e HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:22 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 723

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:22 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NPPMIOIBOGCLBADKIJIPCHHG; path=/ /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0xffffffff&chkTool=off&cmdSearc h=SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:36 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KPANIOIBAIKALDBHNPAGDFOM; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x7fffffff&chkTool=off&cmdSearc h=SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:36 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LPANIOIBBDLKCLIAJOMPKCLA; path=/ Cache-control: private Acunetix Website Audit 724

/searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=&chkTool=off&cmdSearch=SEARCH%2 0AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:36 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OPANIOIBJJHIADPAKMHOPOAM; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0xffffffff&chkTool=off&cmdSearch =SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AGHNIOIBHAGBKDPGGCGHHEAK; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request Acunetix Website Audit 725

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x7fffffff&chkTool=off&Page=0&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:22 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EPPMIOIBDIHKDLDJPCDJGDKG; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x3fffffff&chkTool=on&Page=0&Pri nt=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JEBNIOIBHPHODLPFICPIOBLK; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x7fffffff&chkTool=on&Page=0&Pri nt=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 726

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KEBNIOIBFENBNLMABKNHNDLI; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0xffffffff&chkTool=off&Page=0&P rint=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:22 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FPPMIOIBBOAGDPCLGKCEIPDA; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=&chkTool=off&cmdSearch=SEARCH%20 AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 727

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EGHNIOIBJDCKBDLKCPIBOPIA; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=NULL&chkTool=off&cmdSearch=SEARC H%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IGHNIOIBIDAFPFMEJFPHBPLI; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=&chkTool=on&cmdSearch=SUBMIT%20 SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:40 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 728

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GBMMIOIBJNOKPIIGKPPKICIE; path=/ /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x3fffffff&chkTool=off&cmdSearc h=SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:36 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JPANIOIBJMOIMBBFIGPDOOBG; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x80000000&chkTool=off&cmdSearc h=SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KLANIOIBJGGGDNBANILAEFFI; path=/ Cache-control: private Acunetix Website Audit 729

/searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x3fffffff&chkTool=off&cmdSearc h=SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LLANIOIBDMNOCOEMLHNINMGO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0xffffffff&chkTool=off&cmdSearc h=SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MLANIOIBGLDHKAOHNDFMOIDL; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request Acunetix Website Audit 730

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=NULL&chkTool=off&cmdSearch=SEARC H%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MCHNIOIBKIMEIKPFGJFFDNIL; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x7fffffff&chkTool=off&cmdSearch =SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DCHNIOIBHNEHOFIDJCIJJEOB; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0xffffffff&chkTool=off&cmdSearch =SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 731

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ECHNIOIBMIIMAMBPKALHCBGN; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=&chkTool=off&cmdSearch=SEARCH%20 AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GCHNIOIBFFEFKLBIHKNGJONM; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x7fffffff&chkTool=off&cmdSearc h=SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 732

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NLANIOIBBGHDOKFKJLKPCDBD; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0xffffffff&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:36 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BPANIOIBEGEHLDLKMKFJOFJO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:36 GMT Acunetix Website Audit 733

Set-Cookie: ASPSESSIONIDCCSSQBCR=FPANIOIBBNIOPJBECJHILNAO; path=/ /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x80000000&chkTool=off&cmdSearc h=SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:36 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IPANIOIBENMDPGAAKNMFNEBK; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x80000000&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:36 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=APANIOIBANPEKGHONLKPECPB; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request Acunetix Website Audit 734

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=&chkTool=off&cmdSearch=SEARCH%2 0AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AMANIOIBMFKKEIPELOHPFKHO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x3fffffff&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:36 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OOANIOIBOLGMILNBFMOADIEG; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x7fffffff&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix Website Audit 735

Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:36 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:36 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=POANIOIBCMJDJBOKCMFLACLN; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x80000000&chkTool=on&Page=0&Pri nt=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LEBNIOIBCJMFKCHFOHINOCBF; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0xffffffff&chkTool=on&cmdSear ch=SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 736

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JMJNIOIBALNHBDKJFGIOKBBC; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=&chkTool=on&cmdSearch=SEARCH% 20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KMJNIOIBDBHDAIJKDHAGJEBK; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=NULL&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Acunetix Website Audit 737

Expires: Wed, 20 Jun 2012 17:13:42 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NEMMIOIBHEOAKMLMGLJNPFHG; path=/ /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x7fffffff&chkTool=on&cmdSear ch=SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HMJNIOIBJIIPMCAHNLJAFGOM; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=NULL&chkTool=on&cmdSearch=SUB MIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EMJNIOIBHEGFKILAPJDIJKOA; path=/ Cache-control: private

Acunetix Website Audit

738

/searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x3fffffff&chkTool=on&cmdSear ch=SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FMJNIOIBCCJGGFAMIPMPHLFO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x80000000&chkTool=on&cmdSear ch=SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GMJNIOIBPKFNMOELJHGNMMPD; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request Acunetix Website Audit 739

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x80000000&chkTool=on&cmdSear ch=SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MOJNIOIBLFBHLGHMEFPDHENO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x7fffffff&chkTool=on&Page=0&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GOMMIOIBNDHJMECGGPNNAACC; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=NULL&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 740

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CKPMIOIBOGOAAMJPLGOBHNAG; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x80000000&chkTool=on&Page=0&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FOMMIOIBONKFNCOCHFFNBBBH; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0xffffffff&chkTool=on&Page=0&Pri nt=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 741

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PEBNIOIBNHHMCJGPLGHAEMLP; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=NULL&chkTool=on&cmdSearch=SUB MIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LOJNIOIBKPOGGIMPOIDKNKEJ; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=&chkTool=off&Page=0&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:38 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 742

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NEBNIOIBPEONCJEGOKHIPKCA; path=/ /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x3fffffff&chkTool=on&cmdSear ch=SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OOJNIOIBEJJHDGLAIHHHNJJJ; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:42 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JEMMIOIBJKDNJKIKBFBLGMNA; path=/ Cache-control: private

Acunetix Website Audit

743

/searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=&chkTool=on&cmdSearch=SUBMIT% 20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BIINIOIBPNGMNFPPEAGPCCEO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=NULL&chkTool=on&cmdSearch=SUBMI T%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LBMMIOIBBCFEBEHMNCKKAALB; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request Acunetix Website Audit 744

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x80000000&chkTool=on&cmdSearch =SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:41 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MBMMIOIBOKCLBPGANAKEDFLL; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0xffffffff&chkTool=off&cmdSearch =SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PHINIOIBCGNEBOCMMEBNIIIH; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x3fffffff&chkTool=off&cmdSearch =SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 745

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MHINIOIBBJGNLMONNCOPGHHH; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x7fffffff&chkTool=off&cmdSearch =SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NHINIOIBCONKNCPJDCOFPHBO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x80000000&chkTool=off&cmdSearch =SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 746

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OHINIOIBMOCLFJGILPKIACBG; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x3fffffff&chkTool=on&cmdSearch =SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:41 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NBMMIOIBIABKLGOBJFAOCBLB; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0xffffffff&chkTool=off&cmdSearch =SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:31 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 747

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PKINIOIBDFLCNGAHPMJIAICO; path=/ /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CLINIOIBBALDMBACCNDMNPBJ; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0xffffffff&chkTool=on&cmdSearch =SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:41 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PBMMIOIBLFHJJMHOEPAAIBDC; path=/ Cache-control: private Acunetix Website Audit 748

/searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x80000000&chkTool=off&cmdSearch =SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NKINIOIBGPDCGCILJEANFOKH; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x7fffffff&chkTool=on&cmdSearch =SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:41 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OBMMIOIBFAKGALNMKABNDFCO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request Acunetix Website Audit 749

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x3fffffff&chkTool=off&cmdSearch =SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LKINIOIBICMGIDDCEHKBBPPI; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x7fffffff&chkTool=off&cmdSearch =SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MKINIOIBEJHMJJDHJBPOIILK; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x80000000&chkTool=on&cmdSear ch=SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 750

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DBLNIOIBJIIACIEIBFHKLOFF; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x80000000&chkTool=on&cmdSearch =SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:01 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GNNMIOIBMAHBBBKPIOFOONOB; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=&chkTool=on&cmdSearch=SUBMIT%20 SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 751

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BKMMIOIBBKAAGOBJONGIPDII; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=NULL&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HAOMIOIBGAMPJPNOBJJIIHMI; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Acunetix Website Audit 752

Expires: Wed, 20 Jun 2012 17:14:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CAOMIOIBCHDEMKJMBKHJAMEH; path=/ /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=NULL&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FKMMIOIBPMMILJILMPDGMHHC; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=&chkTool=on&cmdSearch=SEARCH%20 AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:00 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:00 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PMNMIOIBNPKKBBEKDGGEPOJH; path=/ Cache-control: private

Acunetix Website Audit

753

/searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x80000000&chkTool=on&cmdSearch =SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HKMMIOIBDCEJNJHKIPHPCAIH; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x3fffffff&chkTool=on&cmdSearch =SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:01 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FNNMIOIBLMCFNGPIAPNJOCAE; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request Acunetix Website Audit 754

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=NULL&chkTool=on&cmdSearch=SEARC H%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:01 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ENNMIOIBFHLOHOPDDGPFKGCL; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x80000000&chkTool=on&Page=0& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LIDNIOIBEOIHPPJFENFIAPMP; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=NULL&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 755

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FDOMIOIBAOGFGAJGOICJDLLL; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0xffffffff&chkTool=on&Page=0& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NIDNIOIBNPPDBGFHHNEIKDAF; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x7fffffff&chkTool=on&Page=0& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 756

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MIDNIOIBLLIBNIGPHGPONJPE; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x3fffffff&chkTool=on&Page=0& Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KIDNIOIBKDPNKFGFOKLLPHKP; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=NULL&chkTool=on&Page=0&Print= True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 757

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IIDNIOIBIMEGAGMLCLIPJCAK; path=/ /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x3fffffff&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IAOMIOIBPFMBIENJNCIEICCP; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=&chkTool=on&cmdSearch=SEARCH%20 AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ADOMIOIBLFAFDJGLJMCOLDKH; path=/ Cache-control: private Acunetix Website Audit 758

/searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x80000000&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JAOMIOIBHNAOKPDMOCABJKJA; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0xffffffff&chkTool=off&cmdSea rch=SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DIONIOIBDHKIFABMEJAMAKIK; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request Acunetix Website Audit 759

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x7fffffff&chkTool=off&cmdSea rch=SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BIONIOIBCJEKPPEGOMMBILKD; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0xffffffff&chkTool=off&cmdSea rch=SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:41 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LLONIOIBPBMKOGAGJFPDHIIC; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x7fffffff&chkTool=off&cmdSea rch=SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 760

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:41 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:41 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FLONIOIBDPAMDMHKNFJEDFJG; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x80000000&chkTool=off&cmdSea rch=SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:27 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KINNIOIBHPGMBCMOPFGEOABL; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 761

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:27 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BINNIOIBMHHNAGKIMGJLMONE; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x80000000&chkTool=off&cmdSea rch=SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:26 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:26 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MENNIOIBPOOHOCBJIILNALAI; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x3fffffff&chkTool=off&cmdSea rch=SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:27 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 762

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:27 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HINNIOIBCLAFFLEFLOHBNOKB; path=/ /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=NULL&chkTool=off&cmdSearch=SE ARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:27 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GINNIOIBFCMBDBHMONNGCMIN; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x7fffffff&chkTool=on&cmdSearch =SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LKMMIOIBGKHKPGMOKPIIGOPC; path=/ Cache-control: private Acunetix Website Audit 763

/searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=NULL&chkTool=off&cmdSearch=SUBMI T%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JPFNIOIBIIDAMHPLPBGDMGBH; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x3fffffff&chkTool=on&cmdSearch =SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GKMMIOIBCMCLKIACKKAPAAKK; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request Acunetix Website Audit 764

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0xffffffff&chkTool=on&cmdSearch =SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KKMMIOIBJNFBJEBBBOMHPFBN; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0xffffffff&chkTool=on&cmdSearch =SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:17 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BFPMIOIBMBLMBPCFDOLMDAEN; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x3fffffff&chkTool=off&cmdSearch =SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 765

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LPFNIOIBJHDMAJNHKFGHJHAB; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x80000000&chkTool=off&cmdSearch =SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MPFNIOIBIEEJEIHPLJKHMOOI; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0xffffffff&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 766

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NDDNIOIBJMIKKHNBGEOMIALE; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x7fffffff&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MDDNIOIBCBDFOEOCHDFCOBGI; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=&chkTool=off&Page=0&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:05 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 767

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GHOMIOIBCIEKMDKOKGPECIOI; path=/ /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0xffffffff&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:32 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JLENIOIBJCGLMHLLDHAALJAO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=&chkTool=off&Page=0&Print=Tru e HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=COENIOIBJNFMNJGLMPCLBIOC; path=/ Cache-control: private Acunetix Website Audit 768

/searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=&chkTool=off&cmdSearch=SUBMIT%20 SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DPFNIOIBONPFEOHBDNKOHJFB; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x7fffffff&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:32 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ILENIOIBGBPBEGEIIHHPEGGH; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request Acunetix Website Audit 769

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x3fffffff&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:32 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FLENIOIBNMLDLPGDDAGIAKFD; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:32 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ALENIOIBGCAGIBCOJBPKNAAO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x80000000&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 770

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:32 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HLENIOIBEMIGINHCJPMLGMFC; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=NULL&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:32 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:32 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GLENIOIBBEMANBBMKNPOMOFL; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x3fffffff&chkTool=off&cmdSearch =SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 771

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EOFNIOIBBLEKANHOPCGEOOHP; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x80000000&chkTool=off&cmdSearch =SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GOFNIOIBJBOIAFINJECAHFKK; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=&chkTool=off&cmdSearch=SUBMIT%20 SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Acunetix Website Audit 772

Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ONFNIOIBOIMHJOPDMAKCMNAA; path=/ /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=NULL&chkTool=off&cmdSearch=SUBMI T%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FOFNIOIBLFIHCJOCDLFFAELF; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x3fffffff&chkTool=off&Page=0 &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LOENIOIBAMCADEAHOGOCNAKE; path=/ Cache-control: private

Acunetix Website Audit

773

/searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x80000000&chkTool=off&Page=0 &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IOENIOIBEDLNDLBEDHPLAPLG; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=NULL&chkTool=off&Page=0&Print =True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GOENIOIBFHJHLFHAODKHAFAD; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request Acunetix Website Audit 774

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x7fffffff&chkTool=off&Page=0 &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KOENIOIBODABGIENIINPNMNO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0xffffffff&chkTool=off&Page=0 &Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JOENIOIBJMNKAEDGNELBCPDF; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x3fffffff&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 775

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:42 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OEMMIOIBCLEJHPMIIFLCBIAH; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x3fffffff&chkTool=on&cmdSearch= SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DIENIOIBOLGLMNGNHOPLGPNJ; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x7fffffff&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 776

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:42 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AFMMIOIBNCPNBCCLPDAKAIGD; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x80000000&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:42 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PEMMIOIBPDKFBFMOEFBJFHEA; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=NULL&chkTool=on&cmdSearch=SEARCH %20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:20 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 777

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CIENIOIBAJAJOLHGMJPIHGKA; path=/ /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x80000000&chkTool=on&cmdSearch =SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HDOMIOIBCKHBEPBOFOIHJOCL; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x3fffffff&chkTool=on&cmdSearch =SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GDOMIOIBFDKLOAOKOLDNLPFE; path=/ Cache-control: private Acunetix Website Audit 778

/searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=&chkTool=on&cmdSearch=SEARCH%20A GAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:18 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MHENIOIBIKJIIIMEMHEAINHN; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0xffffffff&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BFMMIOIBKCLEIFFCPKEELOJD; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request Acunetix Website Audit 779

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x80000000&chkTool=on&cmdSearch= SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:25 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:25 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JJENIOIBCMBHDFEECLPMPLCC; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x3fffffff&chkTool=on&cmdSearch= SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:25 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:25 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IJENIOIBOBONFMLNKNAFIPGO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0xffffffff&chkTool=on&cmdSearch= SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 780

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:25 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:25 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KJENIOIBHEGNLILGCADMNJFJ; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x7fffffff&chkTool=on&cmdSearch= SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:25 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:25 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LJENIOIBPEKLKOOMEMCOCGPC; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=NULL&chkTool=on&cmdSearch=SEARCH %20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 781

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:25 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:25 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FJENIOIBOMDLAEPHKNKJKHHG; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0xffffffff&chkTool=on&cmdSearch= SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GIENIOIBFJNAHNHHANLFEHNA; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x80000000&chkTool=on&cmdSearch= SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:20 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 782

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EIENIOIBJINNBBFDIOOKOAAM; path=/ /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=&chkTool=on&cmdSearch=SEARCH%20A GAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:25 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:25 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DJENIOIBJOJGPIHAIANAFGBF; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x7fffffff&chkTool=on&cmdSearch= SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HIENIOIBNJNNEMFLJEHEEODG; path=/ Cache-control: private Acunetix Website Audit 783

/searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x80000000&chkTool=off&cmdSearc h=SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ECCNIOIBPDCBDKHHGAGEHJLH; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0xffffffff&chkTool=off&cmdSearc h=SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DCCNIOIBNIOHMHNFHDHIOJPH; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request Acunetix Website Audit 784

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x7fffffff&chkTool=on&cmdSearch =SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:19 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JJPMIOIBIGDPHDEBPAEJPDIO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x7fffffff&chkTool=off&cmdSea rch=SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FBMNIOIBNOFJOIPMCAEPHCAP; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0xffffffff&chkTool=off&cmdSea rch=SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 785

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EBMNIOIBBGLCDEAFAHEAOMFL; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x80000000&chkTool=off&cmdSea rch=SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DBMNIOIBMOFMBJKGFAMAEIID; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=&chkTool=on&cmdSearch=SUBMIT%20S EARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 786

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HCCNIOIBOJBMCMCFLBAOCCGP; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=NULL&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CFCNIOIBGIPLCPNKJBNCCKIE; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:08 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 787

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JEMNIOIBMKNAAPJKBEGEDDIA; path=/ /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x3fffffff&chkTool=off&Page=0&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ALCNIOIBAPONLJGNHBEENEPE; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x7fffffff&chkTool=off&Page=0&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PKCNIOIBCPGOBNFFNFKLBAAJ; path=/ Cache-control: private Acunetix Website Audit 788

/searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=&chkTool=on&Page=0&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GLCNIOIBIFOBHDPBNEKDNFHF; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0xffffffff&chkTool=off&Page=0&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BLCNIOIBHOJJOHDMEDMCDLEI; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request Acunetix Website Audit 789

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:19 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JIPMIOIBGBPMHNLKNCGCNOHI; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=NULL&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:19 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OIPMIOIBINCFELHAIFBBOAIE; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x80000000&chkTool=off&Page=0&Pr int=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix Website Audit 790

Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OKCNIOIBIEECLFMPLBOEPLBA; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=NULL&chkTool=off&Page=0&Print=Tr ue HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LKCNIOIBIHPAAMGPAMCHENAL; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Acunetix Website Audit 791

Date: Thu, 21 Jun 2012 13:14:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CGCNIOIBNPHNPDIIHCKGMJLH; path=/ /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0xffffffff&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AGCNIOIBLDPGENOHEGGIDNIJ; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0xffffffff&chkTool=on&cmdSearch =SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:19 GMT Acunetix Website Audit 792

Set-Cookie: ASPSESSIONIDCCSSQBCR=KJPMIOIBAECAOGMLCPBMGJMO; path=/ /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=&chkTool=off&cmdSearch=SUBMIT%2 0SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NJPMIOIBLDHMEGINAIBADCMJ; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x3fffffff&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OFCNIOIBEAKKAEAPGEAONIDO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Acunetix Website Audit 793

Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=NULL&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MFCNIOIBGOPNALKJFCKEGIOG; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x7fffffff&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PFCNIOIBDGMPHGIKHHIGDMLK; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x80000000&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 794

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NFCNIOIBJPMDBDHOGACNLJAB; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=&chkTool=on&Page=0&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:47 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:47 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NNMMIOIBFCENLKBKIAGJAKLB; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x7fffffff&chkTool=off&cmdSearc h=SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 795

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FFCNIOIBLBNEODMAPFAJNCBF; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0xffffffff&chkTool=off&cmdSearc h=SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GFCNIOIBCAPBDNDNECNGMAJN; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x3fffffff&chkTool=off&cmdSearc h=SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:51 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 796

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DFCNIOIBGMKCNKBALBJBCMIO; path=/ /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x80000000&chkTool=off&cmdSearc h=SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EFCNIOIBGGIFEKOLFNFGADDF; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=&chkTool=off&cmdSearch=SUBMIT %20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NAMNIOIBAIIEHIMCOABDPDPK; path=/ Cache-control: private Acunetix Website Audit 797

/searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=&chkTool=on&cmdSearch=SUBMIT%20S EARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IFCNIOIBCFDLCDOAFOHGILOG; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x3fffffff&chkTool=off&cmdSea rch=SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ABMNIOIBONKINAANNBFCBPBO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request Acunetix Website Audit 798

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=NULL&chkTool=off&cmdSearch=SU BMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PAMNIOIBILKJIEDPALDABONI; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0xffffffff&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:19 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GIPMIOIBELAOLGAPFEEFOIGM; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x7fffffff&chkTool=on&cmdSearch= SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 799

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CDDNIOIBNEEAAGDDNKCAKGAG; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x3fffffff&chkTool=off&cmdSea rch=SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PEMNIOIBDBJLLKJCLBKFNHMB; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0xffffffff&chkTool=on&cmdSearch= SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 800

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ADDNIOIBLDMOIAHHEJLDJGDD; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x3fffffff&chkTool=off&cmdSearc h=SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BCCNIOIBGJMPDJLNIPDEFPON; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x3fffffff&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:03 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 801

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IDDNIOIBGACBKNADBHPCGLMN; path=/ /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=NULL&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HDDNIOIBHPHIDEDKJLJOPKAH; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=NULL&chkTool=off&cmdSearch=SEAR CH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ACCNIOIBKKFNFMHJGPNJDDON; path=/ Cache-control: private

Acunetix Website Audit

802

/searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x3fffffff&chkTool=on&cmdSearch= SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PCDNIOIBDNBGGDGEOKLNAOJI; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x7fffffff&chkTool=on&cmdSear ch=SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EBLNIOIBAGEKLINBLHLKFKPM; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request Acunetix Website Audit 803

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x7fffffff&chkTool=off&cmdSea rch=SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BFMNIOIBKDMKIPEAHHAMPDDN; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x80000000&chkTool=on&cmdSearch= SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NCDNIOIBLKPHJGJGFJEMGOJO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x80000000&chkTool=off&cmdSea rch=SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 804

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AFMNIOIBAEHFBGPDMALFGHNF; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0xffffffff&chkTool=on&cmdSear ch=SEARCH%20AGAIN&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FBLNIOIBJKMPKNFCHDINMEFJ; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=NULL&chkTool=on&cmdSearch=SUBMIT %20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 805

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OCDNIOIBMGCNGNHPNLDPPFIA; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0xffffffff&chkTool=off&cmdSea rch=SUBMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OEMNIOIBMDMELDIOOPBCFMPL; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=&chkTool=off&cmdSearch=SUBMIT%2 0SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:17 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 806

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:17 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HFPMIOIBJCEMCOFDENFEGKLH; path=/ /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x7fffffff&chkTool=on&cmdSearch =SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:17 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EFPMIOIBJFDADKAHGLDEGMNO; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=NULL&chkTool=on&cmdSearch=SUBMIT %20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:01 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DADNIOIBPDHKOOBKEHOJBJBN; path=/ Cache-control: private Acunetix Website Audit 807

/searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=NULL&chkTool=off&cmdSearch=SUBM IT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:18 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LFPMIOIBEEKJFMOFFLBPGIKE; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x7fffffff&chkTool=off&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:19 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FIPMIOIBJHIHPGLNJMFBPIND; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request Acunetix Website Audit 808

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x3fffffff&chkTool=off&cmdSea rch=SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:26 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:26 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JENNIOIBONNBMNHMGCBFOGHB; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=NULL&chkTool=off&cmdSearch=SE ARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:26 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:26 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KENNIOIBJOAHFNPICCGKJAJE; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x3fffffff&chkTool=on&cmdSearch= SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 809

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:01 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EADNIOIBINGDMBFJAOCAFIAP; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x7fffffff&chkTool=on&cmdSearch= SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:01 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HADNIOIBOGKJJDIIABKKPNJL; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0x80000000&chkTool=on&cmdSearch= SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 810

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:01 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JADNIOIBODCLABOBEMMBHNIF; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=NULL&chkTool=off&cmdSearch=SU BMIT%20SEARCH&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NEMNIOIBELBNJKKEAMHKBILN; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=0xffffffff&chkTool=on&cmdSearch= SUBMIT%20SEARCH HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:01 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 811

X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:01 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FADNIOIBPEBAJMHOKHHADENK; path=/ /searchresults.asp Details The GET variable PageSize has been set to . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=&chkTool=off&cmdSearch=SEARCH %20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:25 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:25 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FENNIOIBNEAHOIFFFNLAEIJP; path=/ Cache-control: private /searchresults.asp Details The GET variable PageSize has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=0x7fffffff&chkTool=off&cmdSearc h=SEARCH%20AGAIN HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CCCNIOIBPNHFIEBHKDOMIHFH; path=/ Cache-control: private Acunetix Website Audit 812

/searchresults.asp Details The GET variable PageSize has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=0x80000000&chkTool=on&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 279 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JDDNIOIBMPPAGAAIKDFDHNPI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?Print=0x3fffffff&cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CCNMIOIBFEBPEGKODNLDNFJK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=0&Print=0xf Acunetix Website Audit 813

fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:48 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HANMIOIBFKMGHNCELENPNDDH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=0&Print=0x3 fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:06 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NJOMIOIBEOMCJNDBBLILEKKM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=0&Print=0x7f ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix Website Audit 814

Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:48 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IANMIOIBBMMLKAGCCOJEGPLF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?Print=NULL&cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BCNMIOIBBDMMGACBDABLGHAD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=0&Print=NUL L HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Acunetix Website Audit 815

Date: Thu, 21 Jun 2012 13:14:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:06 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LJOMIOIBHDHPBCMMPCJAFFOC; path=/ /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=0&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:48 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DANMIOIBECHBLGLHFOABFMKM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=0&Print=0x8 0000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:06 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:06 GMT Acunetix Website Audit 816

Set-Cookie: ASPSESSIONIDCCSSQBCR=MJOMIOIBNMCCIEHFIJNICONN; path=/ /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=0&Print=0x80 000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:48 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FANMIOIBKOOPAPPKDBDIAEEB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&Page=0&Print=0x3f ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:48 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EANMIOIBCNOPOOCMDMLOHAFK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Acunetix Website Audit 817

Request GET /searchresults.asp?txtSearch=s%20e%20a%20r%20c%20h&submit1=GO&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LIMMIOIBBDGGHCPJHJGMLOLG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtSearch=s%20e%20a%20r%20c%20h&submit1=GO&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MIMMIOIBHLLBFCJNKGNNMLBL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?Print=0x7fffffff&cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix Website Audit 818

Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FCNMIOIBCEPKCHFMGFBPMHIA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IGOMIOIBFBFBIPEAHDGKAPMP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Acunetix Website Audit 819

Connection: close Date: Thu, 21 Jun 2012 13:14:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HGOMIOIBLJGDIMBFIAJPLJCI; path=/ /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PNPMIOIBDPKEPFBKEDOBHNLH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Acunetix Website Audit 820

Expires: Wed, 20 Jun 2012 17:13:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FMMMIOIBGKJNFOMPLNLIKKGP; path=/ /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GMMMIOIBEDCBKEIKJODIJFNL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HMMMIOIBNKNFFKBGCCNLEHGF; path=/ Cache-control: private

Acunetix Website Audit

821

/searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?Print=0x80000000&cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DCNMIOIBFLIAKAOCGGALGKOG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?Print=0xffffffff&cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:49 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:49 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ECNMIOIBPDKNMNGJKOMPNMFL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=NULL HTTP/1.0 Accept: */* Acunetix Website Audit 822

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EMMMIOIBIBGPJLHIGMEMOFKC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MGMMIOIBNHHHOODPCOOHOBOO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 823

HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NGMMIOIBMGFBGIGIAFPJBJFC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OGMMIOIBEHMHBNHAJMOBMHDA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:46 GMT Acunetix Website Audit 824

Set-Cookie: ASPSESSIONIDCCSSQBCR=JMMMIOIBHLAPNPEKCFJCCLHN; path=/ /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JGOMIOIBLBEMPHBFDPEDOPFL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LGMMIOIBFBOKNGBCJCFCGHHB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request Acunetix Website Audit 825

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GNPMIOIBCMPBIOPBKKGLNJFP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtSearch=s%20e%20a%20r%20c%20h&submit1=GO&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JIMMIOIBBGGAELAFAMHAMHIL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Acunetix Website Audit 826

Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=INPMIOIBKLJLOHKNEDFMAINK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PGMMIOIBALGCOCPDJMLPJOCO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtSearch=s%20e%20a%20r%20c%20h&submit1=GO&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:45 GMT Acunetix Website Audit 827

Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IIMMIOIBCHPJCDDGLADBPOJP; path=/ /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtSearch=s%20e%20a%20r%20c%20h&submit1=GO&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:13:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:13:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KIMMIOIBCPFDIAFEMIGHDOGD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FIFOIOIBDOFJLDMBKPDIOOPG; path=/ Cache-control: private Acunetix Website Audit 828

/searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EIFOIOIBKCDJNNDABBNKNOKF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=0&Print=0 x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HMFOIOIBEHDAPBOMMJJPBBJK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request Acunetix Website Audit 829

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=0&Print=0 x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KMFOIOIBCGFGOJMIKKKDAHIB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=0&Print=0 x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JMFOIOIBPOBBBLFCMJNEKFFA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=0&Print=0x ffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 830

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:59 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DOEOIOIBFINGAOHBPFECAGJF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=0&Print=0x 7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:59 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BOEOIOIBPHJJEJKBDGCPMMFN; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=0&Print=N ULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 831

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:59 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:59 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JOEOIOIBBHJKPEPPDMNGCOOL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DIFOIOIBIEHIOLGACCKDGCKC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:08 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 832

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CIFOIOIBGGKKKPOKEBAJDLHM; path=/ /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&Page=0&Print=0 xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LMFOIOIBAMCPLKOHKDFLNCCP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=0&Print=0x 3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:22 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MMGOIOIBHCHOAELKHNIEFNPE; path=/ Cache-control: private Acunetix Website Audit 833

/searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=0&Print=NU LL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:22 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IMGOIOIBEABHNOMFEMJJFMLF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=0&Print=0x 7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:22 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KMGOIOIBCINKOONKAKAPKBOJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request Acunetix Website Audit 834

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=0&Print=0x ffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:22 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NMGOIOIBCGCLLGAAGKCACCKE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&Page=0&Print=0x 80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:22 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:22 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LMGOIOIBPDFFEEOOEOBGPLCG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 835

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AIGOIOIBACEHODDDHKGOBAJK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PHGOIOIBGCKMBDKEMGPPBDAC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 836

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BIGOIOIBEPKJKPNKPNIGLGKG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DIGOIOIBDOIHBCCBJHOAAPBE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:20 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 837

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EIGOIOIBGPPKGFMNBPIBIMHL; path=/ /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&cmdSearch=SEARC H%20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HICOIOIBELHACNLAPOENPIOO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&cmdSearch=SEARC H%20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GICOIOIBMJNONAMEBJGHFEGP; path=/ Cache-control: private Acunetix Website Audit 838

/searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=0&Print=NUL L HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NNCOIOIBPLCPLMIBJKFKFGMB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=0&Print=0x7 fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PNCOIOIBMLPIDEMEAFBDADIE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request Acunetix Website Audit 839

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=0&Print=0x3 fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ONCOIOIBHACHJFGGOADPHGJC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=0&Print=0xff ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=COBOIOIBHFDFGAPJJAMMCHAK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=0&Print=0x7f ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 840

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BOBOIOIBPLBPPFDNOBAECCLB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&cmdSearch=SEARC H%20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CICOIOIBALCELLGCGOAPCMKE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&cmdSearch=SEARC H%20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 841

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FICOIOIBJGKFKNAABAFJOEOG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&cmdSearch=SEARC H%20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EICOIOIBHAHECNCCDGOPLDOH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=0&Print=0x8 0000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:33 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 842

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AOCOIOIBPNEAJLFIMFCILOPK; path=/ /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=0&Print=0x 80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MODOIOIBLGNJPAFKCFKLNKAA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=0&Print=0x 3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LODOIOIBMLOMAJNPGAJFLGPO; path=/ Cache-control: private Acunetix Website Audit 843

/searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EIEOIOIBNACKAFGIOECPANCB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MIEOIOIBNJCFPDEPAMMFOECH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request Acunetix Website Audit 844

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DIEOIOIBDPGCLKOJPFFHGKBB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:42 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BJDOIOIBKKFGOOLIADNNCFML; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&Page=0&Print=0xf fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 845

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BOCOIOIBKKFLEFOEEFDLFANH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:42 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FJDOIOIBIFCIKPFIADOEMFMG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&Page=0&Print=NU LL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 846

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:46 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:46 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KODOIOIBGAIOMCFDKBKBEMLI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:42 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:42 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GJDOIOIBAFCOAMJKJDLFDGPL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:26 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 847

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:26 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LGHOIOIBOFLENFJICEPPBPGJ; path=/ /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AFKOIOIBLDJOIIECIKJJJKKG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IEKOIOIBGNBPFIKHFEPLNOCC; path=/ Cache-control: private Acunetix Website Audit 848

/searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=0&Print=0 xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LKKOIOIBJFHFCJDCFBFDMCGC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=0&Print=N ULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ELKOIOIBMNFCJJKEDLJBJLFB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request Acunetix Website Audit 849

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=0&Print=0 x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MKKOIOIBLBOBOHBNPELEMGAB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=0&Print=N ULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ELJOIOIBLNICAHFGJEFMCCNH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 850

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NGJOIOIBIDJFAKNDPGBBELPI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=0&Print=0 x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FLJOIOIBAPLGOIFGJHCGANIN; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 851

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:03 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:03 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HEKOIOIBEDKHNNFMIBOLPPAI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&Page=0&Print=0 x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GLJOIOIBDEKMCELHIEKJKPCM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:15 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 852

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:15 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DELOIOIBOKHEMIHFEANHEDGC; path=/ /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=0&Print=0 xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:17 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MKLOIOIBFGNGBPJNBILKLHND; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=0&Print=0 x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:17 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LKLOIOIBMFOPMCBBPHOKEEJF; path=/ Cache-control: private Acunetix Website Audit 853

/searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:27 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LDMOIOIBDEHFPBHOEPIFDIPE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:27 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NDMOIOIBLPFHDOMCDHFAEGCP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request Acunetix Website Audit 854

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:27 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MDMOIOIBOIJFANLHBKEPPJPD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:15 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EELOIOIBHLAILPPDAMNGMKHA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 855

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:15 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FELOIOIBEDJLFHOIDJHKIJDO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:15 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:15 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HELOIOIBAOKPBLOLPNABOAGH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=0&Print=0 x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 856

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:17 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KKLOIOIBHCECPEDOHCEOIBFB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&Page=0&Print=0 x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:17 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:17 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JKLOIOIBEHPKHODKMIIIBAOE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=0&Print=0 x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:28 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 857

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NLHOIOIBKEIBJDEIBEGDKNOJ; path=/ /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=0&Print=0 x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MLHOIOIBGEBHBHBLFOKBOMPJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=0&Print=0 x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AMHOIOIBHHKANMILBMDBOGCP; path=/ Cache-control: private Acunetix Website Audit 858

/searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PGIOIOIBEMEGPOGFMGMAOILL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=0&Print=0 xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PLHOIOIBKMIBCCKNLBLGMNDI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request Acunetix Website Audit 859

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:26 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:26 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PGHOIOIBNPIPKJAEEHJGLBEP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:26 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:26 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AHHOIOIBIPJFKFGOBDLKGPGC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 860

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:26 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:26 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OGHOIOIBFACNIGDBGNOLDOEM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&Page=0&Print=N ULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LLHOIOIBLGNMADGPCFHFOKJG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 861

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:26 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:26 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BHHOIOIBNEEAMOEFFAAJBLEC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DHIOIOIBLIHGNNGFBAIHCKJA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=0&Print=0x 7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:40 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 862

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LLIOIOIBCNGPCDFMPABMEPIC; path=/ /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=0&Print=0x 80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KLIOIOIBPFNDOIMIEBONGCCC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=0&Print=0x ffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MLIOIOIBNCFHHOLINGBNJCFA; path=/ Cache-control: private Acunetix Website Audit 863

/searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MGJOIOIBPLHIFGIFPEMICDNA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:51 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LGJOIOIBKCFMJHFFMCHCCKGC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request Acunetix Website Audit 864

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GHIOIOIBOOJHADNGFLABNNMP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EHIOIOIBBCAINJFHANHELMOI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 865

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FHIOIOIBMBFGMLOHIHHAIGLF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=0&Print=0x 3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JLIOIOIBEIKHAFNMCLFMILPO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&Page=0&Print=NU LL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 866

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:19:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:19:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ILIOIOIBPCOHOKBAPACIGKII; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BPKNIOIBCHGGBLFJLENPBHJL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=0&Print=0xfff fffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:50 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 867

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:50 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OFKNIOIBIGMPCEIPABMLBABD; path=/ /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FPKNIOIBHJFBCJBMLAFLJBPO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HPKNIOIBHMBBPIBKGACNGGJB; path=/ Cache-control: private Acunetix Website Audit 868

/searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EPKNIOIBCLMEJPFHINLNJODF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=0&Print=0x800 00000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:50 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JFKNIOIBNPPFPEOCNONOCDJN; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request Acunetix Website Audit 869

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DNJNIOIBELFJNDEGLDAHLCPP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=0&Print=0x3ff fffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:50 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MFKNIOIBAKOEKIKBEEDKBMJE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=0&Print=0x7ff fffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 870

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:50 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NFKNIOIBNEGGGHNKLNFMIJAG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=on&Page=0&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:50 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LFKNIOIBGODLCICENDLOIKMF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 871

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GPKNIOIBFAKNDAFPGOGFDOII; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ADMNIOIBCLPHGLPOKHKPEMHJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:08 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 872

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PCMNIOIBOHKKJJHAFHPDNKHO; path=/ /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BDMNIOIBLPMGFLCEGEBFGMGA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DDMNIOIBENOHDMNLFNCNIGPJ; path=/ Cache-control: private Acunetix Website Audit 873

/searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CDMNIOIBJPKJLACLIBNGCPBD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=0&Print=0x3f ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LILNIOIBLKIKNNHPLJLDJFMO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request Acunetix Website Audit 874

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=0&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KILNIOIBLGJHDNFKCELADNOO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=0&Print=0x7f ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NILNIOIBFENHOABFAJBAHDJH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=0&Print=0xff ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 875

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OILNIOIBEEBKMHDHOBOOPPKP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=10&chkTool=off&Page=0&Print=0x80 000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MILNIOIBFJBKLINIOFMHPFPJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=0&Print=0x7 fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 876

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:13 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MMHNIOIBDGHKMNCNONNEELFG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KEHNIOIBFJDNOICCMFDAKGPF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=0&Print=0xf fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:13 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 877

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:13 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PMHNIOIBFDOOFFFKPCNFOMKE; path=/ /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:30 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:30 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MIINIOIBDACBGOABNMKPJKIK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=0&Print=NU LL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:13 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GNHNIOIBMEFIAEGNIALFJLLM; path=/ Cache-control: private Acunetix Website Audit 878

/searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=0&Print=NUL L HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LIGNIOIBAJKNFLALOMCJNEMO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=0&Print=0x8 0000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MIGNIOIBNFNLOBHDCGHDDPAL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request Acunetix Website Audit 879

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&Page=0&Print=0x3 fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KIGNIOIBPHDFHJMPFOEPHMEP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CEHNIOIBKJPCPFPDMMMPAAKC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 880

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BEHNIOIBGMEFMPPDLIGDMEEC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:30 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:30 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NIINIOIBPCPHHFHHDEGAKFGG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 881

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PMJNIOIBHFFPDOGICJGDMAKC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=0&Print=0x 7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IBJNIOIBMFAMBOEOMGCJFFOH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:45 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 882

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OMJNIOIBDGABEIKCEMGCLKJI; path=/ /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BNJNIOIBABIHAILLPNGPPGHK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:45 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:45 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ANJNIOIBFGJPNGJGDMCGCDPL; path=/ Cache-control: private Acunetix Website Audit 883

/searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:30 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:30 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PIINIOIBENCAIDAJPNICINOH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:30 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:30 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OIINIOIBJFEEIHDGLDCBOLLD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request Acunetix Website Audit 884

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=0&Print=0x 3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FBJNIOIBBIAALLFIDAMANFJF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=0&Print=0x ffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HBJNIOIBJFJBCGJPEKHEILFH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&Page=0&Print=0x 80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 885

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:16:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:16:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GBJNIOIBKFJIPPEDBLMKGKPF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=0&Print=0x3ff fffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GMMNIOIBFFNECPILJPNDEEGJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&cmdSearch=SEARCH %20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 886

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BNAOIOIBDICAOMFGOJJNKHOF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&cmdSearch=SEARCH %20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OMAOIOIBDKCGMNOHIOMMJPKM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&cmdSearch=SEARCH %20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:07 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 887

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ANAOIOIBHFHKMMGCCPDDLFJD; path=/ /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=0&Print=0x3f ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:11 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GEBOIOIBCHEMCEJKHPEBCIKC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=0&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:11 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FEBOIOIBJAEAPMIDFBLOCPLL; path=/ Cache-control: private Acunetix Website Audit 888

/searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=0&Print=0x7ff fffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FDAOIOIBIBKFOHAEDIHLONGP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=0&Print=0x800 00000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EDAOIOIBKFJJLLPOHFIPDHBE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request Acunetix Website Audit 889

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=0&Print=0xfff fffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LDAOIOIBIHGLFDMNOGMMKEGP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&cmdSearch=SEARCH %20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PMAOIOIBFDMHKCMGEBFJEKCF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&cmdSearch=SEARCH %20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 890

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:07 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:07 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NMAOIOIBBNMBCAPKLGNLAEDI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=0&Print=0x80 000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:11 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HEBOIOIBHJNGIKGPILIDEIHH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&cmdSearch=SUBMI T%20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 891

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KGBOIOIBLDCAFJJJKFNIPDLF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&cmdSearch=SUBMI T%20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JGBOIOIBJCMJMJGBGENLDHFE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=0&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:20 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 892

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:20 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ONBOIOIBJOGMGDKCIBPHMFOI; path=/ /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=0&Print=0x80 000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AOBOIOIBIPCAKNIKANLPFHGB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&Page=0&Print=0x3f ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PNBOIOIBFLAFCCAAMEKFJGCF; path=/ Cache-control: private Acunetix Website Audit 893

/searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=0&Print=0x7f ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:11 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JEBOIOIBKIEDIPKEAFKEFICA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&Page=0&Print=0xff ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:11 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:11 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IEBOIOIBGLIBLPHJBKDPHDEO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request Acunetix Website Audit 894

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&cmdSearch=SUBMI T%20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HGBOIOIBALPCFDHDPLLGMJOI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&cmdSearch=SUBMI T%20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IGBOIOIBMANLPHFDEHCACDLA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=off&cmdSearch=SUBMI T%20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 895

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:18:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:18:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GGBOIOIBHPEHMFIHHFIKOAPI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:26 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:26 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KGNNIOIBJGAOFFBOHNCNLLAB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 896

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:26 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:26 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JGNNIOIBPANGANCKBKFCIFGG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=0&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EAONIOIBAIEIMGAEBHIDCKHH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=0&Print=0x80 000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:31 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 897

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GAONIOIBIICFEODPGLGJFBCF; path=/ /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=0&Print=0x3f ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FAONIOIBMBAKMIIFKGPLNGDH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=0&Print=0x800 00000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IMMNIOIBMEHJOGMLLLGCABOD; path=/ Cache-control: private Acunetix Website Audit 898

/searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=0&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HMMNIOIBIBGNDKIBBNFDFCEK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=0&Print=0x7ff fffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JMMNIOIBCJLBGKFHCFFMPFCH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request Acunetix Website Audit 899

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:26 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:26 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HGNNIOIBJONIOOJEADMPBBND; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=on&Page=0&Print=0xfff fffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:16 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:16 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KMMNIOIBCKEMBKJPGKKJLHCJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 900

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KJONIOIBDJGBFGFMCJMLDLKG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&cmdSearch=SUBMIT %20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KLPNIOIBKMJOFEJPCMHHMMOD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&cmdSearch=SUBMIT %20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 901

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LLPNIOIBDPOHKDJPONJBDPFF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&cmdSearch=SUBMIT %20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MLPNIOIBLEABDKBBPDCDDBJO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=0&Print=0x3ff fffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:58 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 902

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DDAOIOIBCNDFCCACDKHEBOLN; path=/ /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&cmdSearch=SUBMIT %20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NLPNIOIBIHJFFFNNLPEIBEHF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=100&chkTool=on&cmdSearch=SUBMIT %20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CKONIOIBELMINOFMCDKKDJLE; path=/ Cache-control: private Acunetix Website Audit 903

/searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MJONIOIBGMEKDFCBOHIHDGNP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=0&Print=0x7f ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GCPNIOIBPELDJNOJPBDKDMBF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request Acunetix Website Audit 904

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&Page=0&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PCPNIOIBADPMDCFJMJNMBPKI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&Page=0&Print=0xff ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:17:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:17:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ICPNIOIBOJPPEMNOABGGAPBG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 905

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:27 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ODMOIOIBMJOMMEOEABOHIEGL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&cmdSearch=SEAR CH%20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LMLPIOIBDHMDNHPHPLECHKIK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&cmdSearch=SEAR CH%20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 906

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KMLPIOIBBGPAACNBBPFINMFE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&cmdSearch=SEAR CH%20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MMLPIOIBNDMHGLFCNNOKDMDF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&cmdSearch=SEAR CH%20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:21 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 907

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OMLPIOIBAADNGJDHMNDBKOEH; path=/ /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&cmdSearch=SEAR CH%20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:21 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:21 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NMLPIOIBMJJDEPODKDKLDNDJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&cmdSearch=SUBM IT%20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HCLPIOIBHKGGJAODLDEPINFO; path=/ Cache-control: private Acunetix Website Audit 908

/searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&cmdSearch=SUBM IT%20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:09 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:09 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GCLPIOIBGLNCLMMPNDOMPOIF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&cmdSearch=SUBM IT%20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ICLPIOIBGDGLNCBBMACFOHFD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request Acunetix Website Audit 909

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&cmdSearch=SUBM IT%20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KCLPIOIBAAFIEMKHOJCPEAOD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=on&cmdSearch=SUBM IT%20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JCLPIOIBEKCPHHJNFHMLGDBI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&cmdSearch=SUB MIT%20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 910

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GGMPIOIBGKGGAFKJNLBLHCDG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&cmdSearch=SEA RCH%20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:50 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OJNPIOIBDAPIOCMPGKPCFABP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&cmdSearch=SEA RCH%20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 911

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:50 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NJNPIOIBKHDCKIFEOAFAPIMB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&cmdSearch=SEA RCH%20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:50 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PJNPIOIBNPDAOKPGJFFFFMEO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:54 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 912

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FCGNIOIBKGMBNANKGFHPHGBA; path=/ /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&cmdSearch=SEA RCH%20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:50 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:50 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AKNPIOIBMHOABPDPFDLLPOCJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&cmdSearch=SUB MIT%20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HGMPIOIBBHCJFJEKPNNIEDBN; path=/ Cache-control: private Acunetix Website Audit 913

/searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&cmdSearch=SUB MIT%20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:31 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:31 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FGMPIOIBLGEMJHKEEEEHKCJJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&cmdSearch=SUB MIT%20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OPMPIOIBJEFNGMFDLLFLHJAD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request Acunetix Website Audit 914

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&cmdSearch=SEA RCH%20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HANPIOIBGOPMMGKOAINAFLHA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&cmdSearch=SUB MIT%20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:40 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:40 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PPMPIOIBNLOKPEAOIPDGHACD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 915

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CAJPIOIBFPOHDGKALBACEHNC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PFIPIOIBNHFMHFONADGHKOGI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 916

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FAJPIOIBGLCGNGEPANNNHCLG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OJJPIOIBHKCIKNALJBHIDPKN; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:34 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 917

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GAJPIOIBDNKNKHKNFBLLJFKC; path=/ /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LFIPIOIBHDGAGJIGMEAIMJFF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:13 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GLHPIOIBAMHBHOGMGFBOMIIA; path=/ Cache-control: private Acunetix Website Audit 918

/searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MFIPIOIBKHHLDBNEJNFLHIIH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OFIPIOIBHGAKDAMMEAPJAMFB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request Acunetix Website Audit 919

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NFIPIOIBEAFCENOPDDDGMHIK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PJJPIOIBKJDCMEMPNPMIDCNM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 920

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:04 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NNKPIOIBJPMPJHAPPCLIOIJJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:04 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MNKPIOIBIHNOLKNIADKNLEPF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 921

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:04 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ONKPIOIBMKFILIHJEKNPMDGI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:04 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:04 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AOKPIOIBHIBDJKJOGEDJFOFM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:24:04 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 922

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:24:04 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PNKPIOIBIJOEMOCNMKKCOKAC; path=/ /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DEKPIOIBJMMLDPNIAGOCPODA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:44 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GKJPIOIBMKIEAGHJPOODHKCO; path=/ Cache-control: private Acunetix Website Audit 923

/searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GEKPIOIBOHFCMGGLBAFKGJKK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HEKPIOIBANEDHKJLPFBPLFLL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request Acunetix Website Audit 924

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=50&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EEKPIOIBPJBLCAJCBNEBLFNF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ECGNIOIBLKMKDMKBCOAGCGBD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 925

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MJCNIOIBLHEGAABAGIDKOEFN; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NJCNIOIBHCNBLPDFDPMLBOCP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 926

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LJCNIOIBJPPINCCHHEMJNENO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JJCNIOIBCAPPHPKAAIALPHPG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:53 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 927

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KJCNIOIBFCFEGILFMFCKDFGK; path=/ /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=0&Print=0x7 fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DOCNIOIBNAMFOBHLLCHLFALH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=0&Print=0xf fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EOCNIOIBHPNNBGGABDFFJAHA; path=/ Cache-control: private Acunetix Website Audit 928

/searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=0&Print=0x8 0000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=COCNIOIBAFCEOGCICLBNMIKJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=0&Print=NUL L HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AOCNIOIBLJJJFBGPLOIKAMLI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request Acunetix Website Audit 929

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&Page=0&Print=0x3 fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:55 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:55 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BOCNIOIBKEOMEFPKJLFGMINK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=0&Print=0xff ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OHBNIOIBHOGNLEEOLKKDOOOE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 930

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:37 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LCBNIOIBLOJBHLAOLCLKMCPI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:37 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MCBNIOIBMBDKDPEBIIGNONBM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=0&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 931

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:23 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:23 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MBANIOIBLMFEPFMEJCNMDHKM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=0&Print=0xf fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:23 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:23 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CBANIOIBFDPICKIHLMMCNNAC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&Page=0&Print=0x7 fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:23 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 932

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:23 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DBANIOIBFKDONGNHJJLHFDPO; path=/ /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=0&Print=0x80 000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MHBNIOIBAEDEBDMNBLELDCHA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=0&Print=0x7f ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NHBNIOIBEIHPCGDOMCAADMCI; path=/ Cache-control: private Acunetix Website Audit 933

/searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&Page=0&Print=0x3f ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LHBNIOIBFNDOGJGGDAGNBBNE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:37 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NCBNIOIBJOGNAHFDDIEICBKA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request Acunetix Website Audit 934

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:14:37 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:14:37 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ADBNIOIBDFEONIGHOOOENJDK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GMENIOIBPJMMKMENIGHFKCEA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=0&Print=0xf fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 935

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BEFNIOIBOBMGBOKNFDGNLMHD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HMENIOIBPOCMKOPOJCKBHFDI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 936

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MMENIOIBKFAFJPMIKNNKAIFF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NMENIOIBKCKKBILMEFHHFAGM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=0&Print=0x7 fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:39 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 937

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EEFNIOIBECCPEDNFOOCENBLB; path=/ /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:54 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:54 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DCGNIOIBBKODBGPOADNLOFDD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=0&Print=NUL L HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FEFNIOIBHGHFLOFGHLGHNNLA; path=/ Cache-control: private Acunetix Website Audit 938

/searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=0&Print=0x3 fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DEFNIOIBJPBBDDOBGEPIGADE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=off&Page=0&Print=0x8 0000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:39 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CEFNIOIBNMKCCEBNFPHMLFIN; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request Acunetix Website Audit 939

GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LMENIOIBGILOICFJHAPLOPNP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HHDNIOIBGLHIJIHDDMKIGCIA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 940

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KHDNIOIBMMMBNHLCIILHMKNH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GHDNIOIBGNINGLEFGJBIDHEL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 941

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EHDNIOIBJKLFMFDAIGMIOEOA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=20&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:05 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:05 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FHDNIOIBJAFDOOGMHDKFFFJK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=0&Print=0x7f ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:08 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 942

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LPDNIOIBKEDDIGFECODHIMJL; path=/ /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=0&Print=0xff ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MPDNIOIBIAENDDLDKGEFGCGN; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=0&Print=0x80 000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KPDNIOIBFNLILLOJOLMKHNPJ; path=/ Cache-control: private Acunetix Website Audit 943

/searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=0&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IPDNIOIBBAFDLFKGMKLBAEGJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=50&chkTool=on&Page=0&Print=0x3f ffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:15:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:15:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JPDNIOIBHODMMDAJJMGPELMP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request Acunetix Website Audit 944

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:19 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GAAPIOIBAEGLHBKAIAFCBEJA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:19 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FAAPIOIBBIINBBIEEHBOBLDM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 945

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:19 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HAAPIOIBIKKOKEBLBFJHKLOJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:19 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JAAPIOIBLFBGICAPCHPMHMJK; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&cmdSearch=SUBMIT% 20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 946

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:19 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IAAPIOIBLBHNKBICMPJMMHBJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PFPOIOIBFCHHKGHPGEDLAMKB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:01 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 947

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:01 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DMOOIOIBKMDDKBDGKEPEHKOL; path=/ /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AGPOIOIBMNLLAGPBACNJMLMB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DGPOIOIBKIKCHILMNBJECFHJ; path=/ Cache-control: private Acunetix Website Audit 948

/searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:10 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:10 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CGPOIOIBGHPCGCJOBNAIMLIB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KIAPIOIBNOJBOOOEBKLOFNDE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request Acunetix Website Audit 949

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BDBPIOIBLBJLHGIJNBFANMEN; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CDBPIOIBJIGDHLPFPJKMEDIF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 950

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DDBPIOIBAFNJOHDPHJCMHILC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DNBPIOIBPGGLACMEJDPGMGNC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 951

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FDBPIOIBNHIILLDGOHNALJND; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OIAPIOIBJHPNIBFKGMADAKDE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:24 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 952

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MIAPIOIBJOFNHDEHADHINBJN; path=/ /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PIAPIOIBKNFNJALOEBMCBDFA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&cmdSearch=SUBMIT %20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:33 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:33 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ADBPIOIBPHPBPPFEJCMCMCEN; path=/ Cache-control: private Acunetix Website Audit 953

/searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=on&cmdSearch=SEARCH% 20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:24 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:24 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BJAPIOIBEPNLBCJLGLKKPOFP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NMMOIOIBLMNJDENKJAFFCMDN; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request Acunetix Website Audit 954

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=0&Print= 0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FKMOIOIBAIMJBEJOAOMAGNHG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OMMOIOIBABCKFCBPHANMEMEM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 955

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ANMOIOIBPDJHOKHHPOKAENJA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PMMOIOIBPGOCAKHNOHANAADO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=0&Print= NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 956

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BKMOIOIBFHGAHAGAFJEICJAP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=20&chkTool=off&cmdSearch=SEARCH% 20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:27 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CEMOIOIBPLDNHNGNMHIKKIDA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=0&Print= 0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:29 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 957

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CKMOIOIBAOCGEPCDDACCCDFK; path=/ /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=0&Print= 0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=EKMOIOIBHFPDIHHCAEFHPPMC; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=100&chkTool=off&Page=0&Print= 0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:29 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DKMOIOIBNIBGFPOFALAJKPNG; path=/ Cache-control: private Acunetix Website Audit 958

/searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&cmdSearch=SUBMIT%2 0SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:34 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:34 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CNMOIOIBLHDHHNCKFJEOOMNM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:52 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CCOOIOIBFKHMMCFKPGGMLMBM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request Acunetix Website Audit 959

GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:52 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ACOOIOIBKLKGLCGBJBEGAMAF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:52 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DCOOIOIBHDJLEBLJDKJDLMBJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 960

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:01 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MLOOIOIBPALIHBDAKANIGMDM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=off&cmdSearch=SUBMIT% 20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:01 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:01 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LLOOIOIBOAAFLCCPMCIGNDBM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 961

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LHNOIOIBKBCHJBECNNJNINGA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KHNOIOIBBJCONLIBPEAIAJDE; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:43 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 962

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MHNOIOIBFFGBEJIMKIHIKHPF; path=/ /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OHNOIOIBNBNJJBNBLDCMAJJH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=50&chkTool=on&cmdSearch=SEARCH%2 0AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:20:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:20:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NHNOIOIBJENKPEDJBOLKCGIM; path=/ Cache-control: private Acunetix Website Audit 963

/searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FNBPIOIBPEICHJGNBAKALOFN; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:48 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JOFPIOIBMNADFHHAAMMGBHEJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request Acunetix Website Audit 964

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:48 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IOFPIOIBCNPEGCBNCMODFANH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:48 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:48 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OOFPIOIBCGMKKKIBIEPIEPJJ; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 965

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KIGPIOIBCGIFFPOODHPDABKL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JIGPIOIBDODBIBEBHKBKFHLG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 966

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KKEPIOIBCEPIKGEBLKPILNJB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=JKEPIOIBNGCHBPFIBKJKPBFO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:38 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 967

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MEFPIOIBCOMHGGEIKGEFJDAF; path=/ /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PEFPIOIBEEPJOCGPCMFHLPEO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:38 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NEFPIOIBDMBEHJCLPPEIBNNM; path=/ Cache-control: private Acunetix Website Audit 968

/searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=LIGPIOIBEFBNGLHPIHAFLDIO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:13 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DLHPIOIBLHNEFBOAIKBCACGI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request Acunetix Website Audit 969

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=DDHPIOIBDAMCCILFDABLIEMH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:13 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FLHPIOIBEFBOPIPIMJCMIIKM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 970

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:13 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HLHPIOIBKKPBELGIJLOFFHLI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:13 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ELHPIOIBNLKFPPEHFDFBJIJD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 971

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PCHPIOIBKKKCNIGKKLJFIFDG; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:58 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:58 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=MIGPIOIBNAEPMGGABPOODAFA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:08 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 972

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ADHPIOIBNJBPNHFLNPJHGKIM; path=/ /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CDHPIOIBMKECEMPPDOHDCHAO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=20&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:23:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:23:08 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BDHPIOIBCNDFCDKJJBDDCFAN; path=/ Cache-control: private Acunetix Website Audit 973

/searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OADPIOIBNNMBJDBKFPMJDOKI; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=NADPIOIBOAIAMNPGIGMGDHJF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request Acunetix Website Audit 974

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:02 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PADPIOIBBPIBNNPKGCEEGJHP; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:12 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HLDPIOIBMPIMECADNDDAPJPB; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 975

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:12 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CLDPIOIBNDFPLHPHLEGJPKJL; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:52 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OGCPIOIBPILBDAFNJKBNPCME; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 976

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:43 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:43 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GNBPIOIBEGEDABPPLDPMOENA; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=OR&PageSize=100&chkTool=off&cmdSearch=SEARCH %20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:52 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PGCPIOIBHCFJFIHBNFGDAOKM; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:02 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 977

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:02 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=KADPIOIBOKFLMKPNGIBOHPBJ; path=/ /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&cmdSearch=SUBMI T%20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:21:53 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:21:53 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IHCPIOIBFAJHAEEHEGKJEHPD; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:12 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=FLDPIOIBDBNLKHEPMPBCHJDE; path=/ Cache-control: private Acunetix Website Audit 978

/searchresults.asp Details The GET variable Print has been set to 0xffffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=0xffffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:18 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=CAEPIOIBPCPMIHKOILLPIIGH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x7fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=0x7fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:18 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=BAEPIOIBOCAPOPMDMMNEIPMN; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request Acunetix Website Audit 979

GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:18 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=AAEPIOIBEBGGGHPEOPHJIACH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=IKEPIOIBIDEMCKOGGEAJBMMO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 980

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=GKEPIOIBICPAKGPGJOOAMBJO; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&cmdSearch=SEAR CH%20AGAIN&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:28 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=HKEPIOIBFHAJDCKKKAMJBPLH; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Acunetix Website Audit 981

Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:18 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=OPDPIOIBOJMPOLDGOKGNIJNF; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to NULL . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=NULL HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:12 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ILDPIOIBNDINACDBLPBEKNEN; path=/ Cache-control: private /searchresults.asp Details The GET variable Print has been set to 0x80000000 . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=on&cmdSearch=SEARC H%20AGAIN&Print=0x80000000 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:12 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 982

X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:12 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=ELDPIOIBAIEBDHLPHFHKIOKJ; path=/ /searchresults.asp Details The GET variable Print has been set to 0x3fffffff . Request GET /searchresults.asp?txtKeyWords=search&Match=EXACT&PageSize=10&chkTool=off&cmdSearch=SUBM IT%20SEARCH&Print=0x3fffffff HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Pragma: no-cache Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 500 Internal Server Error Connection: close Date: Thu, 21 Jun 2012 13:22:18 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 278 Content-Type: text/html Expires: Wed, 20 Jun 2012 17:22:18 GMT Set-Cookie: ASPSESSIONIDCCSSQBCR=PPDPIOIBIDAKEOIHPGMODALN; path=/ Cache-control: private

Email address found


Severity Informational Type Informational Reported by module Text search Description
One or more email addresses have been found on this page. The majority of spam comes from email addresses harvested off the internet. The spam-bots (also known as email harvesters and email extractors) are programs that scour the internet looking for email addresses on any website they come across. Spambot programs look for strings like myname@mydomain.com and then record any addresses found.

Impact
Email addresses posted on Web sites may attract spam.

Recommendation
Check references for details on how to solve this problem.

Affected items /calendar.asp Details We found frankm@advantagepoint.org

Acunetix Website Audit

983

Request GET /calendar.asp?View=MONTH&date=7/20/2012&SectionID=-1 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/calendar.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 21612 Content-Type: text/html Cache-control: private /calendar.asp Details We found frankm@advantagepoint.org Request GET /calendar.asp?View=MONTH&date=6/20/2012&SectionID=-1 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/calendar.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 21393 Content-Type: text/html Cache-control: private /calendar.asp Details We found frankm@advantagepoint.org Request GET /calendar.asp HTTP/1.0 Acunetix Website Audit 984

Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/robots.txt Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 21315 Content-Type: text/html Cache-control: private /calendar.asp Details We found frankm@advantagepoint.org Request GET /calendar.asp?View=WEEK&Date=06/20/2012&SectionID=-1 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/calendar.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 22103 Content-Type: text/html Cache-control: private /calendar.asp Details We found frankm@advantagepoint.org Request GET /calendar.asp?View=MONTH&date=5/20/2012&SectionID=-1 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 985

Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/calendar.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:29 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 21611 Content-Type: text/html Cache-control: private /calendar.asp Details We found frankm@advantagepoint.org Request GET /calendar.asp?Date=6%2F20%2F2011&View=MONTH&SectionID=-1 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/calendar.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:26 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET X-Robots-Tag: noindex, nofollow Content-Length: 21401 Content-Type: text/html Cache-control: private /calendar.asp Details We found frankm@advantagepoint.org Request POST /calendar.asp?View=RESULTS HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Acunetix Website Audit 986

Host: www.advantagepoint.org Content-Length: 64 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/calendar.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 17517 Content-Type: text/html Cache-control: private /calendar.asp Details We found frankm@advantagepoint.org Request GET /calendar.asp?View=DAY&Date=06/20/2012&SectionID=-1 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/calendar.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 17790 Content-Type: text/html Cache-control: private /calendar.asp Details We found frankm@advantagepoint.org Request GET /calendar.asp?View=DAY&Date=6/20/2012&SectionID=-1 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Acunetix Website Audit 987

Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/calendar.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 17788 Content-Type: text/html Cache-control: private /calendar.asp Details We found frankm@advantagepoint.org Request GET /calendar.asp?View=MONTH&date=1/20/2012&SectionID=-1 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/calendar.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 21615 Content-Type: text/html Cache-control: private /calendar.asp Details We found frankm@advantagepoint.org Request GET /calendar.asp?Date=6%2F20%2F2013&View=MONTH&SectionID=-1 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix Website Audit 988

Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/calendar.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 21491 Content-Type: text/html Cache-control: private /calendar.asp Details We found frankm@advantagepoint.org Request GET /calendar.asp?View=MONTH&date=2/20/2012&SectionID=-1 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/calendar.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:27 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 21178 Content-Type: text/html Cache-control: private /calendar.asp Details We found frankm@advantagepoint.org Request GET /calendar.asp?View=MONTH&date=4/20/2012&SectionID=-1 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Acunetix Website Audit 989

Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/calendar.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 21394 Content-Type: text/html Cache-control: private /calendar.asp Details We found frankm@advantagepoint.org Request GET /calendar.asp?View=MONTH&date=3/20/2012&SectionID=-1 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/calendar.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 21613 Content-Type: text/html Cache-control: private /calendar.asp Details We found frankm@advantagepoint.org Request GET /calendar.asp?View=MONTH&Date=06/20/2012&SectionID=-1 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Acunetix Website Audit 990

Referer: http://www.advantagepoint.org/calendar.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:28 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 21395 Content-Type: text/html Cache-control: private /contactus.asp Details We found info@advantagepoint.org@advantagepoint.org@advantagepoint.org Request GET /contactus.asp HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/ Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 13013 Content-Type: text/html Cache-control: private /contactus.asp Details We found info@advantagepoint.org@advantagepoint.org Request GET /contactus.asp?cmdPrint=PRINT&cmdClose=CLOSE&Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/contactus.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix Website Audit 991

Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 2597 Content-Type: text/html Cache-control: private /contactus.asp Details We found info@advantagepoint.org@advantagepoint.org@advantagepoint.org Request GET /contactus.asp?cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/contactus.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 13091 Content-Type: text/html Cache-control: private /contactus.asp Details We found info@advantagepoint.org@advantagepoint.org Request GET /contactus.asp?Print=True HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/contactus.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response Acunetix Website Audit 992

HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 2597 Content-Type: text/html Cache-control: private /disclaimer.asp Details We found frankm@advantagepoint.org Request GET /disclaimer.asp HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/searchresults.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 12290 Content-Type: text/html Cache-control: private /disclaimer.asp Details We found frankm@advantagepoint.org Request GET /disclaimer.asp?cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/disclaimer.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Acunetix Website Audit 993

Date: Thu, 21 Jun 2012 06:15:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 12350 Content-Type: text/html /formpage.asp Details We found frankm@advantagepoint.org Request GET /formpage.asp?FormID=1 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/ Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 21118 Content-Type: text/html Cache-control: private /formpage.asp Details We found frankm@advantagepoint.org Request POST /formpage.asp HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Content-Length: 454 Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/formpage.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Acunetix Website Audit 994

Date: Thu, 21 Jun 2012 06:15:25 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 21118 Content-Type: text/html /page.asp Details We found frankm@advantagepoint.org Request GET /page.asp?NavID=18 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/ Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 13090 Content-Type: text/html Cache-control: private /page.asp Details We found frankm@advantagepoint.org Request GET /page.asp?NavID=73 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/ Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:13 GMT Server: Microsoft-IIS/6.0 Acunetix Website Audit 995

X-Powered-By: ASP.NET Content-Length: 12762 Content-Type: text/html /page.asp Details We found frankm@advantagepoint.org Request GET /page.asp?cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/page.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 10191 Content-Type: text/html Cache-control: private /page.asp Details We found frankm@advantagepoint.org Request GET /page.asp HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/ Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 10131 Acunetix Website Audit 996

Content-Type: text/html /page.asp Details We found frankm@advantagepoint.org Request GET /page.asp?NavID=33 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/page.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 16868 Content-Type: text/html Cache-control: private /page.asp Details We found frankm@advantagepoint.org Request GET /page.asp?NavID=58 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/sitemap.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 12272 Content-Type: text/html Cache-control: private Acunetix Website Audit 997

/page.asp Details We found frankm@advantagepoint.org Request GET /page.asp?NavID=26 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/ Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 16269 Content-Type: text/html Cache-control: private /page.asp Details We found frankm@advantagepoint.org Request GET /page.asp?NavID=19 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/page.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:20 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 14903 Content-Type: text/html Cache-control: private

Acunetix Website Audit

998

/search.asp Details We found frankm@advantagepoint.org Request GET /search.asp?cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/search.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 11350 Content-Type: text/html Cache-control: private /search.asp Details We found frankm@advantagepoint.org Request GET /search.asp HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/ Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 11290 Content-Type: text/html Cache-control: private

Acunetix Website Audit

999

/searchresults.asp Details We found frankm@advantagepoint.org Request GET /searchresults.asp?txtSearch=s%20e%20a%20r%20c%20h&submit1=GO HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/ Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 13651 Content-Type: text/html Expires: Wed, 20 Jun 2012 10:15:13 GMT Cache-control: private /searchresults.asp Details We found frankm@advantagepoint.org Request GET /searchresults.asp HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/ Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 11346 Content-Type: text/html Expires: Wed, 20 Jun 2012 10:15:13 GMT Cache-control: private Acunetix Website Audit 1000

/searchresults.asp Details We found frankm@advantagepoint.org Request GET /searchresults.asp?cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/searchresults.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 11406 Content-Type: text/html Expires: Wed, 20 Jun 2012 10:15:35 GMT Cache-control: private /searchresults.asp Details We found frankm@advantagepoint.org Request GET /searchresults.asp?txtKeyWords=search&cmdSearch=SEARCH%20AGAIN&Match=AND&PageSize=10&chk Tool= HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/searchresults.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 13715 Content-Type: text/html Expires: Wed, 20 Jun 2012 10:15:19 GMT Acunetix Website Audit 1001

/searchresults.asp Details We found frankm@advantagepoint.org Request GET /searchresults.asp?txtKeyWords=search&Match=AND&PageSize=10&chkTool=&Page=0 HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/searchresults.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 13679 Content-Type: text/html Expires: Wed, 20 Jun 2012 10:15:19 GMT Cache-control: private /sitecredits.asp Details We found frankm@advantagepoint.org Request GET /sitecredits.asp HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/searchresults.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 8282 Content-Type: text/html Cache-control: private Acunetix Website Audit 1002

/sitemap.asp Details We found frankm@advantagepoint.org Request GET /sitemap.asp HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/ Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:19 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 10241 Content-Type: text/html Cache-control: private /sitemap.asp Details We found frankm@advantagepoint.org Request GET /sitemap.asp?cmdPrint=PRINT&cmdClose=CLOSE HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/sitemap.asp Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:35 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 10301 Content-Type: text/html Cache-control: private

GHDB: robots.txt file


Acunetix Website Audit 1003

Severity Informational Type Informational Reported by module GHDB - Google hacking database Description
The description for this alert is contributed by the GHDB community, it may contain inappropriate language. Category : Files containing juicy info Webmasters wanting to exclude search engine robots from certain parts of their site often choose the use of a robot.txt file on the root of the server. This file basicly tells the bot which directories are supposed to be off-limits. An attacker can easily obtain that information by very simply opening that plain text file in his browser. Webmasters should *never* rely on this for real security issues. Google helps the attacker by allowing a search for the "disallow" keyword. The Google Hacking Database (GHDB) appears courtesy of the Google Hacking community.

Impact
Not available. Check description.

Recommendation
Not available. Check description.

Affected items /robots.txt Details We found (inurl:"robot.txt" | inurl:"robots.txt" ) intext:disallow filetype:txt Request GET /robots.txt HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Content-Length: 679 Content-Type: text/plain Last-Modified: Thu, 19 Jan 2012 22:18:46 GMT Accept-Ranges: bytes ETag: "8e18fe4ff8d6cc1:14216" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 21 Jun 2012 06:15:13 GMT Connection: close

GHDB: robots.txt with Disallow tag


Severity Informational 1004

Acunetix Website Audit

Type Informational Reported by module GHDB - Google hacking database Description


The description for this alert is contributed by the GHDB community, it may contain inappropriate language. Category : Files containing juicy info The robots.txt file serves as a set of instructions for web crawlers. The "disallow" tag tells a web crawler where NOT to look, for whatever reason. Hackers will always go to those places first! The Google Hacking Database (GHDB) appears courtesy of the Google Hacking community.

Impact
Not available. Check description.

Recommendation
Not available. Check description.

Affected items /robots.txt Details We found "robots.txt" "Disallow:" filetype:txt Request GET /robots.txt HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Content-Length: 679 Content-Type: text/plain Last-Modified: Thu, 19 Jan 2012 22:18:46 GMT Accept-Ranges: bytes ETag: "8e18fe4ff8d6cc1:14216" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Thu, 21 Jun 2012 06:15:13 GMT Connection: close

Password type input with autocomplete enabled


Severity Informational Type Informational Reported by module Crawler Description Acunetix Website Audit 1005

When a new name and password is entered in a form and the form is submitted, the browser asks if the password should be saved. Thereafter when the form is displayed, the name and password are filled in automatically or are completed as the name is entered. An attacker with local access could obtain the cleartext password from the browser cache.

Impact
Possible sensitive information disclosure

Recommendation
The password autocomplete should be disabled in sensitive applications. To disable autocomplete, you may use a code similar to: <INPUT TYPE="password" AUTOCOMPLETE="off">

Affected items / Details Password type input named password from unnamed form with action https://www.centertrac.com/com.ctrac/extlogin has autocomplete enabled. Request GET / HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: {postponed}={postponed} Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 10101 Content-Type: text/html Set-Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG; path=/ Cache-control: private /index.asp Details Password type input named password from unnamed form with action https://www.centertrac.com/com.ctrac/extlogin has autocomplete enabled. Request GET /index.asp HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: www.advantagepoint.org Cookie: ASPSESSIONIDCARSSADR=PELICKDBCAEAPGEHMOEAOBAG Connection: Close Acunetix-Aspect: enabled Acunetix-Aspect-Password: ***** Pragma: no-cache Acunetix-aspect-queries: filelist;aspectalerts Referer: http://www.advantagepoint.org/ Acunetix-Product: WVS/5.1 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix Website Audit 1006

Response HTTP/1.1 200 OK Connection: close Date: Thu, 21 Jun 2012 06:15:13 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 10101 Content-Type: text/html Cache-control: private

Acunetix Website Audit

1007

You might also like