Scan date: 24-6-2012 10:24:27                                                     
===================================================================================================
| Domain: http://www.antiazer.do.am/                                             
| Server: uServ/1.5.4                                                             
| IP: 193.109.247.162                                                             
===================================================================================================
|                                                                                                   
| File check:                                                                     
| [+] CODE: 200e URL: http://www.antiazer.do.am/favicon.ico                                                             
| [+] CODE: 200e URL: http://www.antiazer.do.am/php/gaestebuch/admin/index.php                                           
| [+] CODE: 200e URL: http://www.antiazer.do.am/php/index.php                                                           
| [+] CODE: 200e URL: http://www.antiazer.do.am/poll                                                                     
| [+] CODE: 200e URL: http://www.antiazer.do.am/robots.txt                                                               
| [+] CODE: 200e URL: http://www.antiazer.do.am/sitemap.xml                                                             
===================================================================================================
===================================================================================================
Scan end date: 24-6-2012 10:27:27

---------------------------------------------------------------------------
+ Target IP:          193.109.247.162
+ Target Hostname:    www.antiazer.do.am
+ Target Port:        80
+ Start Time:         2012-06-24 11:01:45 (GMT3)
---------------------------------------------------------------------------
+ Server: uServ/1.5.4
+ Root page / redirects to: http://antiazer.do.am/
+ No CGI Directories found (use '-C all' to force check all possible dirs)
+ robots.txt contains 16 entries which should be manually viewed.
+ OSVDB-3092: /sitemap.xml: This gives a nice listing of the site content.
+ OSVDB-3092: /mail/: This might be interesting...
+ OSVDB-3092: /poll: This might be interesting...
+ OSVDB-3092: /stat/: This might be interesting...
+ Retrieved x-powered-by header: PHP/5.2.12
+ 6474 items checked: 22 error(s) and 6 item(s) reported on remote host
+ End Time:           2012-06-24 11:22:45 (GMT3) (1260 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested

Scan date: 24-6-2012 10:33:28                                                     
===================================================================================================
| Domain: http://www.newsarmenia.ru/                                             
| Server: Apache/1.3.34 (Unix) mod_accel/1.0.34 mod_deflate/1.0.21 mod_ssl/2.8.25 OpenSSL/0.9.7d
| IP: 195.93.246.15                                                               
===================================================================================================
|                                                                                                   
| File check:                                                                     
| [+] CODE: 200e URL: http://www.newsarmenia.ru/server-status                                                           
| [+] CODE: 200e URL: http://www.newsarmenia.ru/admin/index.html                                                         
| [+] CODE: 200e URL: http://www.newsarmenia.ru/administrator/index.html                                                 
| [+] CODE: 200e URL: http://www.newsarmenia.ru/favicon.ico                                                             
| [+] CODE: 200e URL: http://www.newsarmenia.ru/htmlb/index.html                                                         
| [+] CODE: 200e URL: http://www.newsarmenia.ru/login.html                                                               
| [+] CODE: 200e URL: http://www.newsarmenia.ru/search/htx/SQLQHit.asp                                                   
| [+] CODE: 200e URL: http://www.newsarmenia.ru/search/sqlqhit.asp                                                       
| [+] CODE: 200e URL: http://www.newsarmenia.ru/search/SQLQHit.asp                                                       
| [+] CODE: 200e URL: http://www.newsarmenia.ru/SilverStream/Meta/Tables/?access-mode=text                               
| [+] CODE: 200e URL: http://www.newsarmenia.ru/SQLTrace/index.html                                                     
| [+] CODE: 200e URL: http://www.newsarmenia.ru/webdav/index.html                                                       
===================================================================================================
===================================================================================================
Scan end date: 24-6-2012 10:35:40

---------------------------------------------------------------------------
+ Target IP:          195.93.246.15
+ Target Hostname:    www.newsarmenia.ru
+ Target Port:        80
+ Start Time:         2012-06-24 10:25:02 (GMT3)
---------------------------------------------------------------------------
+ Server: Apache/1.3.34 (Unix) mod_accel/1.0.34 mod_deflate/1.0.21 mod_ssl/2.8.25 OpenSSL/0.9.7d
+ No CGI Directories found (use '-C all' to force check all possible dirs)
+ OpenSSL/0.9.7d appears to be outdated (current is at least 1.0.0d). OpenSSL 0.9.8r is also current.
+ Apache/1.3.34 appears to be outdated (current is at least Apache/2.2.19). Apache 1.3.42 (final release) and 2.0.64 are also current.
+ mod_ssl/2.8.25 appears to be outdated (current is at least 2.8.31) (may depend on server version)
+ Allowed HTTP Methods: GET, HEAD, OPTIONS, TRACE
+ OSVDB-877: HTTP TRACE method is active, suggesting the host is vulnerable to XST
+ /lists/admin/: PHPList pre 2.6.4 contains a number of vulnerabilities including remote administrative access, harvesting user info and more. Default login to admin interface is admin/phplist
+ /SiteServer/admin/: Site Server components admin. Default account may be 'LDAP_Anonymous', pass is 'LdapPassword_1'. see http://www.wiretrip.net/rfp/p/doc.asp/i1/d69.htm
+ /webcart/carts/: This may allow attackers to read credit card data. Reconfigure to make this dir not accessible via the web.
+ /webcart/config/: This may allow attackers to read credit card data. Reconfigure to make this dir not accessible via the web.
+ /webcart/orders/: This may allow attackers to read credit card data. Reconfigure to make this dir not accessible via the web.
+ OSVDB-2754: /guestbook/?number=5&lng=%3Cscript%3Ealert(document.domain);%3C/script%3E: MPM Guestbook 1.2 and previous are vulnreable to XSS attacks.
+ OSVDB-3092: /_vti_txt/_vti_cnf/: FrontPage directory found.
+ OSVDB-847: /file/../../../../../../../../etc/: The Icecast server allows the file system to be probed for directory structure, but does not allow arbitrary file retrieval.
+ OSVDB-578: /level/16/exec/: CISCO HTTP service allows remote execution of commands
+ OSVDB-13402: /com/novell/: Novell web server allows directory listing
+ OSVDB-561: /server-status: This reveals Apache information. Comment out appropriate line in httpd.conf or restrict access to allowed hosts.
+ OSVDB-2695: /photo/: My Photo Gallery pre 3.6 contains multiple vulnerabilities including directory traversal, unspecified vulnerabilities and remote management interface access.
+ OSVDB-3092: /archive/: This might be interesting...
+ OSVDB-3092: /info/: This might be interesting...
+ OSVDB-3092: /service/: This might be interesting...
+ OSVDB-3092: /site/iissamples/: This might be interesting...
+ OSVDB-3093: /moregroupware/modules/webmail2/inc/: This might be interesting... has been seen in web logs from an unknown scanner.
+ OSVDB-3233: /_private/_vti_cnf/: FrontPage directory found.
+ OSVDB-3233: /_vti_bin/_vti_cnf/: FrontPage directory found.
+ OSVDB-3233: /_vti_cnf/_vti_cnf/: FrontPage directory found.
+ OSVDB-3233: /_vti_log/_vti_cnf/: FrontPage directory found.
+ OSVDB-3233: /webapp/admin/_pages/_bc4jadmin/: Oracle JSP files
+ OSVDB-3233: /_pages/_demo/: Oracle JSP file
+ OSVDB-3233: /_pages/_webapp/_jsp/: Oracle JSP file.
+ OSVDB-3233: /_pages/_demo/_sql/: Oracle JSP file.
+ OSVDB-3233: //OA_HTML/_pages/: Oracle JSP file.
+ OSVDB-3233: /OA_HTML/webtools/doc/index.html: Cabo DHTML Components Help Page
+ OSVDB-3093: /OA_JAVA/Oracle/: Oracle Applications portal pages found.
+ OSVDB-3093: /OA_HTML/oam/: Oracle Applications portal pages found.
+ OSVDB-3233: /OA_HTML/jsp/: Oracle Applications portal page found
+ OSVDB-3092: /cehttp/property/: Sterling Commerce Connect Direct configuration files.
+ OSVDB-3092: /sc/: This might be interesting... potential country code (Seychelles)
+ /admin/index.html: Admin login page/section found.
+ /administrator/index.html: Admin login page/section found.
+ /login.html: Admin login page/section found.
+ /v2/painel/: Admin login page/section found.
+ /wordpress/: A Wordpress installation was found.
+ /3rdparty/phpMyAdmin/: phpMyAdmin directory found
+ /3rdparty/phpmyadmin/: phpMyAdmin directory found
+ 6474 items checked: 1 error(s) and 44 item(s) reported on remote host
+ End Time:           2012-06-24 10:57:31 (GMT3) (1949 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested