[<%=idx%>] <%=escapeHTML(issue.name)%>

<% if crypto_issues.is_a?( Array ) && crypto_issues[idx-1] %>

<% end %>

Module name: <%=escapeHTML(issue.mod_name)%>
(Internal module name: <%=escapeHTML(issue.internal_modname)%>)
Affected variable: <%=escapeHTML(issue.var)%>
Affected URL: <%=escapeHTML(issue.url)%>
HTML Element: <%=issue.elem%>
Requires manual verification?: <%=issue.verification ? 'Yes' : 'No'%>

CWE: <%=issue.cwe%>
(<%=issue.cwe_url%>)
Severity: <%=issue.severity%>
CVSSV2: <%=issue.cvssv2%>

References

<%=escapeHTML(source)%> - <%=url%>
N/A

Description

<%=escapeHTML(issue.description)%>

<% if issue.remedy_guidance && !issue.remedy_guidance.empty? %>

Remedial guidance

<%=escapeHTML(issue.remedy_guidance)%>

<%end%> <% if issue.remedy_code && !issue.remedy_code.empty? %>

Remedial code

<%=escapeHTML(issue.remedy_code)%>

<%end%>

<% issue.variations.each_with_index do |variation, j| %> <% var_idx = j + 1%>

[+] Variation <%=var_idx%>

Affected URL:

<%=escapeHTML(variation['url'])%>

<% if (variation['response'] && !variation['response'].empty?) && variation['regexp_match'] %>

<% match = escapeHTML( variation['regexp_match'] )%>

 <%=escapeHTML( variation['response'] ).gsub( match, '' + match + '' ) %>

<%end%> <% if issue.method && (issue.elem.downcase == 'form' || issue.elem.downcase == 'link' ) && ( issue.method.downcase == 'get' || issue.method.downcase == 'post' ) %> <%end%>

<% if variation['injected'] %> Injected value:

 <%=escapeHTML(variation['injected'])%>

<%end%> <% if variation['id'] %> ID:

<%=escapeHTML(variation['id'])%>

<%end%> <% if variation['regexp'] %> Regular expression:

<%=escapeHTML(variation['regexp'])%>

<%end%> <% if variation['regexp_match'] %> Matched by the regular expression:

<%=escapeHTML(variation['regexp_match'])%>

<%end%>

Headers
Request	Response
<% if variation['headers']['request'].is_a?( Hash ) %> <% variation['headers']['request'].each_pair do \|name, val\| %><%=name%><%="\t" + escapeHTML(val) + "\n"%><%end%> <%end%>	<% if variation['headers']['response'].is_a?( Hash ) %> <% variation['headers']['response'].each_pair do \|name, val\| %><%=name%><%="\t" + escapeHTML(val) + "\n"%><%end%> <%end%>

Headers

Request

Response

<% if variation['headers']['request'].is_a?( Hash ) %>

<% variation['headers']['request'].each_pair do |name, val| %><%=name%><%="\t" + escapeHTML(val) + "\n"%><%end%>

<%end%>

<% if variation['headers']['response'].is_a?( Hash ) %>

<% variation['headers']['response'].each_pair do |name, val| %><%=name%><%="\t" + escapeHTML(val) + "\n"%><%end%>

<%end%>

<% if variation['escaped_response']%>

<%end%>