TRACE method is enabled Security VulnerabilityDescriptionHTTP TRACE method is enabled on this web server. In the presence of other cross-domain vulnerabilities in web browsers, sensitive header information could be read from any domains that support the HTTP TRACE method. Impact Attackers may abuse HTTP TRACE functionality to gain access to information in HTTP headers such as cookies and authentication data. References W3C - RFC 2616 US-CERT VU#867593 IIS 6 WWW Service Registry Entries Cross-site tracing (XST) View entire list of over 400 known Web Application Vulnerabilities and the specific technologies which they target. See Web Vulnerabilities in popular applications such as: WordPress, Tiki Wiki, PHPNuke, PHPMyAdmin, phpBB, Mambo, PHP-Fusion, Mantis, Invision Power Board Get latest new web vulnerabilities via RSS |
|
