GeneralInformation

Hostnames	5km-athle-inscriptions.fr www.5km-athle-inscriptions.fr ec2-34-241-205-199.eu-west-1.compute.amazonaws.com
Domains	5km-athle-inscriptions.fr amazonaws.com
Cloud Provider	Amazon
Cloud Region	eu-west-1
Cloud Service	EC2
Country	Ireland
City	Dublin
Organization	Amazon Data Services Ireland Limited
ISP	Amazon.com, Inc.
ASN	AS16509

WebTechnologies

Font scripts

Font Awesome

JavaScript frameworks

GSAP

JavaScript libraries

jQuery3.3.1

UI frameworks

Bootstrap4.0.0

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-23064	Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.
CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2018-14042	4.3In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVE-2018-14041	4.3In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.
CVE-2018-14040	4.3In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
CVE-2016-10735	4.3In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

OpenPorts

80 443

-1427803479 | 2024-05-04T07:19:47.505986

80 / tcp

HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Date: Sat, 04 May 2024 07:19:47 GMT
Location: https://34.241.205.199/
Server: nginx
Content-Length: 178
Connection: keep-alive

1808883529 | 2024-05-04T07:19:51.652357

443 / tcp

HTTP/1.1 200 OK
Access-Control-Allow-Headers: Content-Type, api-client, api-secret, Edition-id, Edition-Api-Key, Authorization, Cookie
Access-Control-Allow-Methods: GET, POST, DELETE, PUT, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html; charset=UTF-8
Date: Sat, 04 May 2024 07:19:51 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: nginx
Set-Cookie: PHPSESSID=0bbb529fatto9qrfshisri7f31; path=/; HttpOnly
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept-Encoding
Content-Length: 8843
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f7:4c:f2:97:32:fe:34:83:ac:a3:c1:6b:46:fc:22
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Mar  4 00:00:00 2024 GMT
            Not After : Apr  2 23:59:59 2025 GMT
        Subject: CN=5km-athle-inscriptions.fr
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:dc:9a:94:bf:4c:b0:05:91:20:29:0c:5a:23:50:
                    b2:50:4d:c8:69:e1:9a:0b:ca:3e:a1:77:b2:25:9e:
                    c1:2b:da:3b:1f:ba:19:c0:02:4d:75:3e:d3:d4:a7:
                    f3:4b:ef:f9:15:a5:b6:36:ae:e7:89:fe:a7:83:95:
                    0e:e0:98:03:8c:10:06:0e:80:84:9b:c5:2b:c1:d3:
                    76:a3:47:6a:a5:60:c7:1b:8c:f2:66:3c:4d:c9:eb:
                    ab:91:9c:5d:f8:ba:7e:6f:18:c3:62:da:6b:ea:a2:
                    89:ce:aa:10:31:f3:c7:ec:a7:64:2d:95:92:68:b8:
                    0c:ac:20:dd:e2:cf:d4:a0:16:fc:e9:33:77:77:5e:
                    a9:ce:b7:c8:80:93:52:22:d3:8d:b3:f6:90:4c:a3:
                    6a:c1:90:fe:e7:d6:5e:a3:8a:a1:ca:3d:74:82:2a:
                    a4:73:1c:20:8e:b8:93:32:34:0f:ed:04:21:53:10:
                    a5:c0:65:00:7b:1b:16:5a:46:cb:be:8e:5f:32:ef:
                    85:89:58:7f:9e:c2:46:59:30:cd:b1:28:3b:08:7a:
                    c4:74:49:af:16:0a:8b:99:53:f1:07:1f:bf:b0:11:
                    0e:fe:68:35:e1:a1:57:77:c6:63:de:0f:ba:3f:92:
                    b9:af:2e:6f:c7:e4:71:c7:35:5e:f4:b0:e1:bc:8f:
                    f4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                BF:73:70:9A:5E:6F:9D:97:FC:A1:5E:8D:17:EB:08:F4:83:DA:2F:C9
            X509v3 Subject Alternative Name: 
                DNS:5km-athle-inscriptions.fr, DNS:www.5km-athle-inscriptions.fr
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Mar  4 01:05:30.592 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:BE:34:D1:F5:AA:B3:56:3A:D7:33:4E:
                                D1:13:4D:56:D3:E2:88:0D:12:6E:6F:A3:92:DC:5B:9A:
                                87:AC:79:89:AA:02:21:00:BB:8E:D8:B8:FC:29:AF:63:
                                AD:E4:F2:75:62:BF:9B:9B:AC:6C:FF:71:74:88:04:5F:
                                41:0D:2A:B2:0E:BB:AA:01
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Mar  4 01:05:30.596 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:7B:0D:BC:71:D9:06:73:96:D3:92:B2:7C:
                                48:99:FA:19:77:75:A0:8F:39:F4:CB:41:CB:2D:60:47:
                                A2:84:A2:46:02:21:00:D5:4B:4B:CC:84:2F:67:E9:E6:
                                F0:09:B9:81:40:EB:54:39:19:8D:10:9A:08:92:F0:60:
                                80:C5:EC:B4:12:E6:FE
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Mar  4 01:05:30.636 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:F6:6B:1D:D9:40:EF:C3:DB:2A:94:B5:
                                69:33:47:8C:FC:B4:D4:AC:B8:E6:E8:30:9D:CE:B5:4D:
                                65:01:90:B9:9F:02:21:00:FC:44:3B:54:13:81:9F:E0:
                                68:A5:F7:F2:80:E4:2F:C1:21:64:73:72:25:AE:B5:A3:
                                F2:2A:D7:0D:A5:68:35:21
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        08:84:31:25:c7:6b:3d:2d:65:be:39:b1:46:63:c6:52:9d:5c:
        46:54:29:6f:4d:65:d9:17:86:66:5c:44:bc:da:8c:8c:89:9b:
        fd:1a:fe:71:fb:c7:e9:ea:64:4b:2d:b4:df:ce:4e:0b:7f:ef:
        17:29:98:1e:58:b3:b4:f4:6a:a6:6e:15:34:e2:55:81:de:0e:
        05:d5:58:4f:ce:0a:38:ee:a3:a6:6a:20:0e:44:0f:b5:b2:1a:
        6f:60:45:98:38:8d:d6:e4:ef:7b:45:92:cf:f6:3f:91:3d:16:
        fa:77:62:be:9d:4f:06:a3:0c:69:69:7f:e6:60:8f:84:d0:6f:
        19:54:18:d4:3b:6b:ae:da:57:cb:cd:59:6d:41:d5:55:e5:2c:
        53:55:1c:78:22:9c:ff:82:a6:cd:61:42:01:a4:a3:5a:fb:74:
        48:48:53:f0:89:59:f6:f1:26:0a:30:f6:fa:01:0c:22:59:f9:
        89:fc:44:53:8d:5f:d4:5e:ff:7e:38:d9:a9:50:0e:de:c7:ac:
        7f:e6:99:ce:0e:c4:c2:2f:9d:45:09:0a:ce:59:f0:80:31:22:
        7a:3f:52:d8:dc:42:5b:49:c3:4b:c8:47:6e:b9:1d:eb:da:ee:
        51:2c:02:a5:8b:90:08:6d:a8:75:20:ec:f0:47:cb:34:6d:69:
        a5:a3:9e:b5

34.241.205.199

Last Seen: 2024-05-04

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1427803479 | 2024-05-04T07:19:47.505986
80 / tcp

nginx

1808883529 | 2024-05-04T07:19:51.652357
443 / tcp

nginx

Products

Pricing

Contact Us

34.241.205.199

Last Seen: 2024-05-04

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1427803479 | 2024-05-04T07:19:47.505986 80 / tcp

nginx

1808883529 | 2024-05-04T07:19:51.652357 443 / tcp

nginx

Products

Pricing

Contact Us

-1427803479 | 2024-05-04T07:19:47.505986
80 / tcp

1808883529 | 2024-05-04T07:19:51.652357
443 / tcp