How to correct COOKIE + FORCED HTTP METHOD error
I am running a few pages against the Access Me plug-in in
firefox and
received 3 errors..and 2 warnings...
where do i began to resolve these issues?
Access Me String Test Results
FORCED HTTP METHOD
Attack Details:
a.. HTTP Method: SECCOMP
The attacked page is dangerously similar to the original
page. It is 100%
similar. Got access to a resource that should be protected.
Server response
code:200 OK.
COOKIE + FORCED HTTP METHOD
Attack Details:
a.. Input Parameter: ASP.NET_SessionId
b.. HTTP Method: SECCOMP
The attacked page is dangerously similar to the original
page. It is 100%
similar. Got access to a resource that should be protected.
Server response
code:200 OK.
COOKIE
Attack Details:
a.. Input Parameter: ASP.NET_SessionId
The attacked page is dangerously similar to the original
page. It is 100%
similar. Got access to a resource that should be protected.
Server response
code:200 OK.
FORCED HTTP METHOD
Attack Details:
a.. HTTP Method: HEAD
Got access to a resource that should be protected. Server
response code:200
OK. The attacked page is not very similar to the original
page. It is 0.649%
similar.
COOKIE + FORCED HTTP METHOD
Attack Details:
a.. Input Parameter: ASP.NET_SessionId
b.. HTTP Method: HEAD
Got access to a resource that should be protected. Server
response code:200
OK. The attacked page is not very similar to the original
page. It is 0.649%
similar.
ASP, SQL2005, DW8 VBScript, Visual Studio 2005, Visual Studio
2008
I think in get_p method you have declared the field type as Value help and in GET_V method you havent filled your value help table. Please check these two methos. Hope this helps you.
Regards,
Lakshmi.Y
Similar Messages
-
I get the following error message and don't know how to correct it: Sync encountered an error while connecting: Unknown error, Please try again.
There have been problems reported with Sync.
They are working on it, so please try again later when those problems are fixed.
*https://services.mozilla.com/status/
*http://twitter.com/#!/mozservices -
i have this type
Hi,
Your code (with a / after the second CREATE TYPE command) works fine for me.
Whenever you have a problem, post a complete test script that anyone can run to re-create the problem.
Always say what version of Oracle you're using (e.g. 11.2.0.2.0).
See the forum FAQ: https://forums.oracle.com/message/9362002
What do you mean be "not working"? If you're getting an error message, why not post it?
How do you know that FORCE causes the problem? Does the second CREATE TYPE statement work for you if you remove FORCE? -
How to correctly use the evaluate() method in Xpath?
I have this sample code. I would expect the output to be something like
Channel #0
Channel Name : Ch1
Channel #1
Channel Name : Ch2
Channel #2
Channel Name : Ch3
but all I get is
Channel #0
Channel Name : Ch1
Channel #1
Channel Name : Ch1
Channel #2
Channel Name : Ch1
Do I misuse the evaluate() method? It seems the evaluate method disregards the"doc" start node I pass in and always start from the beginning of the XML...
Very appreciate your suggestion. Thank you very much.
import javax.xml.xpath.*;
import org.xml.sax.InputSource;
import java.io.StringReader;
import org.w3c.dom.Document;
import org.w3c.dom.NodeList;
import javax.xml.parsers.DocumentBuilder;
import javax.xml.parsers.DocumentBuilderFactory;
public class EvaluateTest {
* @param args
public static void main(String[] args) {
String myxml = "<?xml version='1.0' encoding='utf-8' ?><mytest><ChannelList>" +
"<Channel><ChannelId>0001</ChannelId><ChannelName>Ch1</ChannelName></Channel>" +
"<Channel><ChannelId>0002</ChannelId><ChannelName>Ch2</ChannelName></Channel>" +
"<Channel><ChannelId>0003</ChannelId><ChannelName>Ch3</ChannelName></Channel>" +
"</ChannelList></mytest>";
//Get the Document object
Document doc = null;
try {
InputSource inputSource = new InputSource();
inputSource.setCharacterStream( new StringReader(myxml));
DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance();
DocumentBuilder db = factory.newDocumentBuilder();
doc = db.parse(inputSource);
//Iterate thru the Channel list
NodeList channellist = getSubElements(doc, "/mytest/ChannelList/Channel");
if (channellist==null)
System.out.println("the channel list is null");
for (int i=0, len=channellist.getLength(); i<len; i++) {
System.out.println("Channel #" + i);
/*{XPathFactory factory = XPathFactory.newInstance();
XPath anxpath = factory.newXPath();
String result = (String)anxpath.evaluate(".", channellist.item(i), XPathConstants.STRING);
out.println(result);}*/
String name = getTagValue(channellist.item(i), "//ChannelName/text()", -1);
System.out.println("Channel Name : " + name);
catch ( Exception e ) {
e.printStackTrace();
return;
//Get the text value of a tag from a document object using XPath method
static public String getTagValue(Object doc, String xpathstr, int index) throws Exception {
String result = "";
if ((doc==null) || (xpathstr==null) || "".equals(xpathstr))
return result;
XPathFactory factory = XPathFactory.newInstance();
XPath xpath = factory.newXPath();
result = (String)xpath.evaluate(xpathstr, doc, XPathConstants.STRING);
if (result==null)
result = "";
return result;
static public NodeList getSubElements(Object doc, String xpathstr) throws Exception {
if ((doc==null) || (xpathstr==null) || "".equals(xpathstr))
return null;
XPathFactory factory = XPathFactory.newInstance();
XPath xpath = factory.newXPath();
Object result = xpath.evaluate(xpathstr, doc, XPathConstants.NODESET);
return (NodeList)result;
}Sorry here is a repost of the code. Didn't realize there is a code tag feature.
import javax.xml.xpath.*;
import org.xml.sax.InputSource;
import java.io.StringReader;
import org.w3c.dom.Document;
import org.w3c.dom.NodeList;
import javax.xml.parsers.DocumentBuilder;
import javax.xml.parsers.DocumentBuilderFactory;
public class EvaluateTest {
* @param args
public static void main(String[] args) {
String myxml = "<?xml version='1.0' encoding='utf-8' ?><mytest><ChannelList>" +
"<Channel><ChannelId>0001</ChannelId><ChannelName>Ch1</ChannelName></Channel>" +
"<Channel><ChannelId>0002</ChannelId><ChannelName>Ch2</ChannelName></Channel>" +
"<Channel><ChannelId>0003</ChannelId><ChannelName>Ch3</ChannelName></Channel>" +
"</ChannelList></mytest>";
//Get the Document object
Document doc = null;
try {
InputSource inputSource = new InputSource();
inputSource.setCharacterStream( new StringReader(myxml));
DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance();
DocumentBuilder db = factory.newDocumentBuilder();
doc = db.parse(inputSource);
//Iterate thru the Channel list
NodeList channellist = getSubElements(doc, "/mytest/ChannelList/Channel");
if (channellist==null)
System.out.println("the channel list is null");
for (int i=0, len=channellist.getLength(); i<len; i++) {
System.out.println("Channel #" + i);
String name = getTagValue(channellist.item(i), "//ChannelName/text()", -1);
System.out.println("Channel Name : " + name);
} catch ( Exception e ) {
e.printStackTrace();
return;
//Get the text value of a tag from a document object using XPath method
static public String getTagValue(Object doc, String xpathstr, int index) throws Exception {
String result = "";
if ((doc==null) || (xpathstr==null) || "".equals(xpathstr))
return result;
XPathFactory factory = XPathFactory.newInstance();
XPath xpath = factory.newXPath();
result = (String)xpath.evaluate(xpathstr, doc, XPathConstants.STRING);
if (result==null)
result = "";
return result;
static public NodeList getSubElements(Object doc, String xpathstr) throws Exception {
if ((doc==null) || (xpathstr==null) || "".equals(xpathstr))
return null;
XPathFactory factory = XPathFactory.newInstance();
XPath xpath = factory.newXPath();
Object result = xpath.evaluate(xpathstr, doc, XPathConstants.NODESET);
return (NodeList)result;
} -
Does anyone know how to correct the download for itunes error message 7 windows 193?
I'm getting error message 7 (windows 193) when I download new itunes update.
Try Troubleshooting issues with iTunes for Windows updates - MSVCR80
-
Please help with correcting calling class and method errors
Hi All,
I have created a game (like battleship) for 2 tanks. I can't seem to connect the classes and methods to get the values for the last die face rolled; last direction rolled on a 4 headed dice; the x and y position for each tank; the armour value and the firePower (or hit value) to print.
Each row of these values is supposed to print 50 times using a while loop.
(N.B. The code is appended below my name.)
Could anyone please help me? I would be most grateful. Thank you.
Steve
import java.util.*;
class Client
static Die die;
static Direction dir;
static Tank tk1;
static Tank tk2;
public static final
void main( String[] argv)
die = new Die();
dir = new Direction();
tk1 = new Tank();
tk2 = new Tank();
int lastFace;
int setfaceLast;
int x;
int y;
int armourVal;
int firePower;
int battleNum=0;
int battles;
int moves = 0;
System.out.println("Tank");
System.out.println("'\t' Number");
System.out.println("'\t' Dir");
System.out.println("'\t' xValue");
System.out.println("'\t' yValue");
System.out.println("'\t' Armour");
System.out.println("Firepower"+'\n');
int i=0;
//int getLastFace();
//int LastDirName();
while (i <= 50);
int XPos;
int YPos;
Pos p = new Pos();
p.setXPos(x);
p.setYPos(y);
System.out.println ("'\t' Tank 1-");
//System.out.println ( die.getLastFace());
//System.out.println( dir.getLastDirName());
System.out.println(Pos(x));
System.out.println(Pos(y));
System.out.println(armourVal);
System.out.println(firePower+'\n');
System.out.println ("Tank 2-");
System.out.println ( lastFace);
//System.out.println(LastDir);
System.out.println(x);
System.out.println(y);
System.out.println(armourVal);
System.out.println(firePower+'\n');
moves++;
System.out.println(" '\n' + BATTLE");
class Tank
public static final int MINGRID;
public static final int MAXGRID;
static Die die = new Die();
static Direction dir = new Direction();
private static int battleCount;
private static int moveCount;
private int x;
private int y;
private int armourVal;
private int firePower;
public Tank()
int MINGRID=-10;
int MAXGRID=10;
battleCount=0;
moveCount=0;
x=0;
y=0;
armourVal=10;
firePower=1;
public
int getmove()
die.roll();
dir.roll();
dir.getLastDir();
die.getLastFace();
int x;
int y;
int Pos;
switch( dir.getLastDir() )
case Direction.UP:
y += die.getLastFace();
break;
case Direction.DOWN:
y -= die.getLastFace();
break;
case Direction.RIGHT:
x += die.getLastFace();
case Direction.LEFT:
x-= die.getLastFace();
break;
if ( x > MAXGRID )
x = (2 * MAXGRID) - x;
else if ( x < MINGRID )
x = (-2 * MINGRID) - x;
if ( y > MAXGRID )
y = (-2 * MAXGRID) - y;
else if ( y < MINGRID )
y = (-2 * MINGRID) - y;
if ( x == -3 && y == -3 )
firePower++;
System.out.println("Yipee - more firepower.");
if ( x == 3 && y == 3)
this.armourVal += 10;
System.out.println("Yipee - more armour.");
return Pos;
//printDetails();
public boolean getcontinueBattle(Tank tk2)
moveCount++;
if ( x == tk2.x && y == tk2.y)
battleCount++;
System.out.println("Battle");
tk2.armourVal -= firePower;
armourVal -= tk2.firePower;
if (tk2.armourVal < 0 )
int moveCount, battleCount;
return false;
if ( armourVal < 0 )
int moveCount, battleCount;
return false;
return true;
public int getprintDetails()
int ptDet;
return ptDet;
class Direction
private int lastFaceDir;
private Random rnd;
public static final int UP = 1;
public static final int DOWN = 2;
public static final int LEFT = 3;
public static final int RIGHT = 4;
String direction;
private
int getRandomNum()
int raw = rnd.nextInt();
raw = Math.abs( raw );
raw %= 4;
raw++;
return raw;
public
Direction()
rnd = new Random();
roll();
public
int roll()
lastFaceDir = getRandomNum();
if (lastFaceDir == UP)
direction = "up";
else if (lastFaceDir == DOWN)
direction= "down";
else if (lastFaceDir == LEFT)
direction = "left";
else if (lastFaceDir == RIGHT)
direction= "right";
return lastFaceDir;
public
int getLastFaceDir()
return lastFaceDir;
}// end class
class Die
private int lastFace;
private Random rnd;
private
int getRandomNum()
int raw = rnd.nextInt();
raw = Math.abs( raw );
raw %= 6;
raw++;
return raw;
public
Die()
rnd = new Random();
roll();
public
int roll()
lastFace = getRandomNum();
return lastFace;
public
int getLastFace()
return lastFace;
}// end classI got this sorted!
I unzipped the JAR and loaded the classes individually - so now the "reference" issue went away. Instead I now have a new problem, but I will post that seperately. -
Correct and re-send the error messages in PI
Hi everyone,
Today when iam monitoring my PI i found error like some objects missing in the que, I toublshooted it by using inbount xml payload and found the error and cunsulted the user he asked me to correct and re-send the error messages. as iam really new to PI monitoring i really dont know how to correct and re-send the error messages in PI, can any one please help me with it.
Thanks in advanceWhen you send the messages from RWB-->Component Monitoring ->Integration Engine>test message, runtime parameters like Sender System, Receiver system, Adapter specific message attributes won't carry any values. If you are using any of these paramters in the mapping step,, the mapping will fail.
I think in your case, RFC look up would have been configured based on Sender Business system/Service. but when you send message from RWB, the value for this field is empty. So that is why it is failing as the message cannot find the business system and communication channel.
If you use the sender file name, server name or any other parameters in the message mapping, then message will fail in the message mapping step. That is the major set back in RWB-->Test message.
Reasons:
1)We post messages directly into pipeline step message mapping.
2)The previous pipeline steps are ignored when post messages from RWB such as Receiver determination, routing etc
3)Receiver determination step is responsible to send Sender/Receiver values into the mapping step.
Hope i have clarified your questions -
using bootcamp, was installing windows xp, at the select ntfs or fat format mistakenly selected "leave the current file system intact." How can that be changed to a correct choice. Mac side opens correctly. Windows shows disk error. and doesn't respond to press any key. When looking in the startup disk section, windows on boot camp can be seen, but not selected. (13"MacBook Pro 10.6.8)
Have a read here http://support.apple.com/kb/TS1722 for solution.
Stefan -
Hi! At connection to iTunes the section "other" constantly increases. What's the matter? How to avoid it? On phone music isn't necessary, video too isn't present. But another grows. How to correct it? I know only one method, it to dump all settings and a content.
http://discussions.apple.com/docs/DOC-5142
-
I've created a simple web page that contains a text box in which the user enters an URL. And also have a servlet to take this address and do something "useful" with it. The Servlet has a doPost method to get this address, and the web page also has the corresponding method
(<FORM method="POST" ACTION="../fyp/AddressServlet" >).
I'm using a j2ee server, which runs fine, as does the deploytool.
However, when I attempt to open the web page in my browser, I get the following error,
"HTTP Status 405-HTTP method GET is not supported by this URL"
I don't know why I'm getting a GET method error, when it's a POST method I'm using.
Any help would be appreciated,
thanks,
ahhforHi !
You're using the POST method to call the servlet when you submit the HTML page. However, when you try to load your HTML page into the browser, this is done with GET !
Check your server.xml file in the /conf directory and see if your application context is correctly defined. And then check the web.xml file in your application's WEB-INF directory. Finally, check your path to the servlet in your HTML file. -
Invalid key predicate error while running http method get via tcode /IWFND/MAINT_SERVICE
Hi,
I am facing an error which says "Invalid Key predicate"while running http method get via tcode /IWFND/MAINT_SERVICE.
The same works fine for sdata .The SICF nodes are active.But when the url has odata it does not seem to work as expected .This is the url I am trying to execute.
/sap/opu/odata/sap/QMLSINSPECTIONLOT/MATERIALDETAIL(MaterialNumber='1706',FROMDATE='20120303',TODATE='20120708')?$format=xml
(does not work -error invalid predicate)
/sap/opu/sdata/sap/QMLSINSPECTIONLOT/MATERIALDETAIL(MaterialNumber='1706',FROMDATE='20120303',TODATE='20120708')?$format=xml(works fine)
Could you help me with this error?
Regards,
AnnAnn,
FROMDATE is a date field? Then you need to specify while providing value.
Example: Check it here.
How to use OData Date filter query to filter data from OData NetWeaver Gateway Service?
Thanks
Krishna -
How to correct Runtime error R6034 when attempting to update iTunes on PC?
How to correct Runtime error R6034 when attempting to update iTunes on PC?
Hey ievafromsa,
Thanks for the question. I understand that you are experiencing issues installing iTunes for Windows. The following article outlines the error message you are receiving and a potential resolution:
iTunes 11.1.4 for Windows: Unable to install or open
http://support.apple.com/kb/TS5376
Some Windows customers may experience installation issues while trying to install or open iTunes 11.1.4.
Symptoms may include:
"The program can't start because MSVCR80.dll is missing from your computer"
"iTunes was not installed correctly. Please reinstall iTunes. Error 7 (Windows Error 126)”
"Runtime Error: R6034 - An application has made an attempt to load the C runtime library incorrectly"
"Entry point not found: videoTracks@QTMovie@@QBE?AV?$Vector@V?$RefPtr@VQTTrack@@@***@@$0A@VCrashOnOverf low@@***@@XZ could not be located in the dynamic link library C:\Program Files(x86)\Common Files\Apple\Apple Application Support\WebKit.dll”
Resolution
Follow these steps to resolve the issue:
Check for .dll files
1. Go to C:\Program Files (x86)\iTunes and C:\Program Files\iTunes and look for .dll files.
2. If you find QTMovie.DLL, or any other .dll files, move them to the desktop.
3. Reboot your computer.
Note: Depending on your operating system, you may only have one of the listed paths.
Uninstall and reinstall iTunes
1. Uninstall iTunes and all of its related components.
2. Reboot your computer. If you can't uninstall a piece of Apple software, try using theMicrosoft Program Install and Uninstall Utility.
3. Re-download and reinstall iTunes 11.1.4.
Thanks,
Matt M. -
I have a MP 240 printer and want to know how to correct a P8 error message.
I have a MP 240 printer and would like to know how to correct a P 8 error on the LED of my printer. John
The only information I can give you is that given at the bottom of this page:
http://www.apple.com/itunes/podcasts/creatorfaq.html -
How to Resolve HTTP 500 error in sharepoint 2013 workflow
Hi guys,
I am new to Sharepoint. I have created a workflow for sending if a document added or edited in a document library. When i added a document i
workflow status shows workflow started. But when checked in the internal status of the workflow it shows as cancelled.
RequestorId: 2bfd5ec9-1fd1-de92-ccc2-1f2a912c49ce. Details: System.ApplicationException: HTTP 500 {"Transfer-Encoding":["chunked"],"X-SharePointHealthScore":["0"],"SPClientServiceRequestDuration":["132"],"SPRequestGuid":["2bfd5ec9-1fd1-de92-ccc2-1f2a912c49ce"],"request-id":["2bfd5ec9-1fd1-de92-ccc2-1f2a912c49ce"],"X-FRAME-OPTIONS":["SAMEORIGIN"],"MicrosoftSharePointTeamServices":["15.0.0.4420"],"X-Content-Type-Options":["nosniff"],"X-MS-InvokeApp":["1;
RequireReadOnly"],"Cache-Control":["max-age=0, private"],"Date":["Wed, 05 Feb 2014 09:18:43 GMT"],"Server":["Microsoft-IIS\/8.0"],"X-AspNet-Version":["4.0.30319"],"X-Powered-By":["ASP.NET"]}
at Microsoft.Activities.Hosting.Runtime.Subroutine.SubroutineChild.Execute(CodeActivityContext context) at System.Activities.CodeActivity.InternalExecute(ActivityInstance instance, ActivityExecutor executor, BookmarkManager bookmarkManager) at System.Activities.Runtime.Activit
How to resolve this error. It shows http 500 error.Go to one of your SharePoint boxes, open op powershell and get teh logs around the "SPRequestGUid" you see in your message... Do something like this:
Merge-SPLogFile -path "Desktop\wferror.log" -correlation 2bfd5ec9-1fd1-de92-ccc2-1f2a912c49ce
This will basically grab log files from all boxes ULS logs that have to do with that transaction.
*** not sure how far back it will look depending on your log size, but sometimes I've had to reproduce another error (with a new SPGuid) and then Merge logs with that Correlation...
Once you get this file, you can open it with ULSViewer and then you can filter/sort by Product/Category/ErrorLevel/etc... this will definitely help you determine what the issue is. The key is that SPRequestGuid (which is the "Correlation ID"
that you see when you get SharePoint Unexpected errors to reference the log files... -
How to correct "service 'apple mobile device' failed to start" error?
How to correct " service 'Apple Mobile Device' failed to start" error?
How to restart the Apple Mobile Device Service (AMDS) on Windows
Solving MSVCR80 issue and Windows iTunes install issues.
Maybe you are looking for
-
Upgrade Oracle RAC 11.1.0.6 to 11.1.0.7, on linux
Hi, I would just know where I can find a complete guide to upgrade my Oracle RAC 11.1.0.6 to the version 11.1.0.7. It's running on a RedHat 5 (Linux version 2.6.18-164.10.1.el5) I think I've first to upgrade the crs, than the database, is it correct?
-
Reverse Proxy using S1AS7 with libpassthrough.so
My second tier is not functionning properly when placed behind a S1AS7 with reverse proxy Client ====== SunOne web server with Passthrough ====== .NET app server & web services. The web server configuration (reverse proxy � libpassthrough.so) is conf
-
Subclassed Objects in frmxml2f.bat utility cause problems....
Hi everybody, I use the frm2xml.bat file in Windows in order to transform the .fmb files to .xml, then i use the frmxmlv.bat file in order to validate the .xml file. These two steps are successfully completed.... I want to transform the .xml file and
-
How can i manipulate bookmarks. was in html at one time, it was easy.
How can I read ALL of bookmarks. How can I manipulate bookmarks WITHOUT opening Firefox itself. How can I translate it into another formar? html doc txt or whatever. I am tired of not being able to do this and will soon uninstall, and go back to IE,
-
I am trying to put a CD into the drive and it keeps ejecting
the CD's keep ejecting out of the drive,before I can download the music.