OWASP ZAP Scan Report

OWASP ZAP Scan Report
Target: https://dpppappkb.riau.go.id/
All scanned sites: https://dpppappkb.riau.go.id
Javascript included from: https://dpppappkb.riau.go.id

Generated on Wed, 31 May 2023 10:00:23
Summary of Alerts
Risk Level Number of Alerts
High 0
Medium 3
Low 6
Informational 2
Alerts
Name Risk Level Number of Instances
Absence of Anti-CSRF Tokens Medium 102

Content Security Policy (CSP) Header Not Set Medium 103
Missing Anti-clickjacking Header Medium 102
Cookie No HttpOnly Flag Low 7
Cookie Without Secure Flag Low 7
Cookie without SameSite Attribute Low 7
Secure Pages Include Mixed Content Low 102
Strict-Transport-Security Header Not Set Low 102
X-Content-Type-Options Header Missing Low 102
Re-examine Cache-control Directives Informational 60
User Controllable HTML Element Attribute (Potential XSS) Informational 78
Alert Detail
Medium Absence of Anti-CSRF Tokens

Description No Anti-CSRF tokens were found in a HTML submission form.
A cross-site request forgery is an attack that involves forcing a victim to send an HTTP request to a target destination without their knowledge or intent in order to
perform an action as the victim. The underlying cause is application functionality using predictable URL/form actions in a repeatable way. The nature of the attack
is that CSRF exploits the trust that a web site has for a user. By contrast, cross-site scripting (XSS) exploits the trust that a user has for a web site. Like XSS,
CSRF attacks are not necessarily cross-site, but they can be. Cross-site request forgery is also known as CSRF, XSRF, one-click attack, session riding, confused
deputy, and sea surf.
CSRF attacks are effective in a number of situations, including:
* The victim has an active session on the target site.

* The victim is authenticated via HTTP auth on the target site.
* The victim is on the same local network as the target site.
CSRF has primarily been used to perform an action against a target site using the victim's privileges, but recent techniques have been discovered to disclose
information by gaining access to the response. The risk of information disclosure is dramatically increased when the target site is vulnerable to XSS, because XSS
can be used as a platform for CSRF, allowing the attack to operate within the bounds of the same-origin policy.
URL https://dpppappkb.riau.go.id/
Method GET
Parameter
Attack
Evidence <form action="/component/search/%252F#content" method="post" class="search">
URL https://dpppappkb.riau.go.id/berita
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/keluarga-berencana
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/keluarga-berencana/568-pelatihan-sdm-penyedia-layanan-di-dinas-pppa-dan-uptd-ppa-se-provinsi-riau
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/keluarga-berencana/571-penguatan-gugus-tugas-pencegahan-dan-penangan-tindak-pidana-perdagangan-orang-tppo
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/keluarga-berencana/588-cegah-perdagangan-orang-dinas-p3ap2kb-provinsi-riau-taja-rakor-gugus-tugas-pencegahan-dan-
URL
penanganan-tppo-tingkat-provinsi-
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/keluarga-berencana/604-upaya-penguatan-jejaring-antar-kelembagaan-penyediaan-layanan-perlindungan-perempuan
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/keluarga-berencana/624-dp3ap2kb-provinsi-riau-lakukan-advokasi-kebijakan-dan-pendampingan-layanan-perlindungan-
perempuan-provinsi-riau
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/keluarga-berencana/627-upaya-dp3ap2kb-provinsi-riau-cegah-tindak-pidana-perdagangan-orang
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/keluarga-berencana/664-dp3ap2kb-lakukan-pencegahan-kdrtpkdrt-terhadap-perempuan-sejak-dini-
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/keluarga-berencana/667-dp3ap2kb-provinsi-lakukan-pertemuan-koordinasi-dan-kerjasama-lintas-sektoral-dalam-pencegahan-
URL
ktpattpo
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan/562-kegiatan-pendampingan-pelaksanaan-pengarusutamaan-gender-pug-tahun-2019-di-
URL
kabupaten-indragiri-hulu
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan/564-peningkatan-kesejahteraan-dan-pembinaan-ketahan-keluarga
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan/567-pelatihan-penyusunan-rencana-aksi-program-kerja-pengarusutamaan-gender-di-provinsi-
URL
tahun-2019
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan/570-penguatan-kapasitas-sdm-dinas-pemberdayaan-perempuan-dan-perlindungan-anak-terkait-
URL
pug-dan-pprg-di-provinsi-riau
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan/576-sempena-hari-ibu-ke-91-tp-pkk-provinsi-riau-gandeng-dinas-pppa-taja-pameran-perempuan-
URL
ekonomi-kreatif
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan/578-pelatihan-penguatan-kelembagaan-pengarustamaan-gender-pug
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan/591-percepat-pengarusutamaan-gender-dinas-p3ap2kb-provinsi-riau-laksanakan-sosialisasi-
URL
penginputan-pprg-berbasis-online
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan/605-penuhi-hak-anak-wakil-ketua-pkk-riau-tekankan-pentingnya-pola-pengasuhan
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan/606-pelatihan-pendidikan-politik-bagi-perempuan
Method GET
Parameter
Attack
Method GET
Parameter
Attack
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan/699-peran-dp3ap2kb-meningkatkan-penyediaan-kebutuhan-spesifik-bagi-perempuan-dalam-
URL
situasi-darurat-dan-kondisi-khusus
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan/702-puncak-peringatan-hari-kartini-mari-kita-wujudkan-perempuan-riau-ungul-dalam-berbagai-
URL
sektor-pembangunan
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/552-gubri-dan-wagubri-hadiri-peringatan-hari-anak-nasional-tingkat-provinsi-riau-tahun-2018
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/perlindungan-anak/553-usung-tema-inovasi-dan-kreativitas-forum-anak-riau-bekerjasama-dengan-dinas-pppa-berikan-
URL
penghargaan-dafa-award-2018
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/554-gubernur-dan-wakil-gubernur-hadiri-peringatan-hari-anak-tingkat-provinsi
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/569-riau-raih-dua-penghargaan-pada-anugerah-kla-tahun-2019-di-makassar-
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/572-percepat-provinsi-layak-anak-dinas-pppa-provinsi-riau-latih-gugus-tugas-kla
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/577-ketua-tp-pkk-dan-ketua-dwp-provinsi-riau-hadiri-puncak-peringatan-hari-ibu-ke-91-di-semarang
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/perlindungan-anak/583-wujud-komitmen-pemenuhan-hak-dan-perlindungan-anak-pemprov-riau-ikuti-puncak-peringatan-hari-
URL
anak-nasional-2020-secara-virtual
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/592-manajemen-emosi-orang-tua-saat-mendampingi-anak-daring
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/perlindungan-anak/598-memperkuat-kelembagaan-sekolah-ramah-anak-dan-mempercepat-provinsi-riau-menjadi-provinsi-
URL
layak-anak-
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/599-dinilai-komitmen-melindungi-anak-pemprov-riau-raih-penghargaan-dari-kpai-
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/600-peringati-hari-anak-tingkat-provinsi-gubernur-motivasi-anak-riau-lewat-lagu-jangan-menyerah
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/601-lagi-provinsi-riau-raih-penghargaan-nasional-
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/623-buka-rakortek-kla-asisten-i-ingin-riau-layak-anak-di-2024
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/perlindungan-anak/642-persiapkan-launching-bersama-drppa-dinas-p3ap2kb-provinsi-riau-lakukan-pertemuan-dengan-dpppa-
URL
bengkalis-dan-indragiri-hulu
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/669-targetkan-provila-2023-pemprov-riau-gelar-rakortek-percepatan-kla
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/670-patbm-ujung-tombak-pemenuhan-hak-dan-perlindungan-khusus-anak
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/perlindungan-anak/685-dorong-kuantan-singingi-raih-penghargaan-kla-2023-dp3ap2kb-provinsi-riau-perkuat-peran-gugus-
URL
tugas
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/perlindungan-anak/701-ikuti-verifikasi-lapangan-hybrid-kadis-p3ap2kb-provinsi-riau-apresiasi-pemerintah-kabupatenkota-di-
URL
provinsi-riau
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/pug-dan-pkhp
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/pug-dan-pkhp/573-pelatihan-pug-dan-puha-bagi-lembaga-profesi-dan-dunia-usaha
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/677-wisuda-angkatan-2022-akademi-paradigta-indonesia-api
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/sekretariat/678-kadis-p3ap2kb-provinsi-riau-serahkan-piagam-standardisasi-sekolah-ramah-anak-mts-muhammadiyah-02-
URL
pekanbaru
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/sekretariat/680-kadis-dp3ap2kb-provinsi-riau-menghadiri-pengukuhan-puspaga-bunga-kencung-dan-pelantikan-forum-anak-
URL
pelalawan-periode-2022-2024
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/682-pemberian-bantuan-baas-bunda-asuh-anak-stunting-provinsi-riau-dan-kota-pekanbaru
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/sekretariat/683-sekretariat-tim-percepatan-penurunan-stunting-tpps-provinsi-riau-menyelenggarakan-rapat-optimalisasi-
URL
penanganan-stunting
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/684-audiensi-terkait-pendampingan-teknis-dan-advokasi-percepatan-penurunan-stunting-di-provinsi-riau-
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/686-dp3ap2kb-provinsi-riau-sosialisasi-cegah-kekerasan-perempuan-dan-anak-di-lingkungan-sekolah
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/687-kunker-kepala-dinas-p3ap2kb-provinsi-ke-kabupaten-bengkalis
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/688-strategi-komunikasi-adalah-kunci-perubahan-perilaku-dalam-percepatan-menurunkan-kasus-stunting-di-riau
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/689-dorong-penurunan-stunting-melalui-penguatan-kelembagaan-tpps-provinsi-riau
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/690-dp3ap2kb-riau-dorong-cegah-stunting-secara-dini
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/691-penguatan-kapasitas-standar-layanan-perlindungan-perempuan-dan-anak
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/692-stop-kekerasan-terhadap-perempuan-dan-anak
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/693-wujudkan-provila-tahun-2023-dp3ap2kb-provinsi-riau-laksanakan-rakortek-percepatan-kla
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/694-dp3ap2kb-provinsi-riau-pacu-percepatan-purunan-stunting
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/sekretariat/695-kolaborasi-strategi-komunikasi-perubahan-perilaku-skpp-dalam-upaya-percepatan-penurunan-stunting-
URL
bersama-lsm-dan-perusahaan
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/696-optimalkan-evaluasi-kla-2023-pemerintah-provinsi-riau-bentuk-tim-verifikasi-administrasi
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/697-serah-terima-jabatan-pejabat-administrasi-di-lingkungan-dinas-pemberdayaan-perempuan-perlindungan-anak-
pengendalian-penduduk-dan-keluarga-berencana-provinsi-riau
Method GET
Parameter
Attack
https://dpppappkb.riau.go.id/berita/sekretariat/698-dinas-p3a2pkb-mendorong-peningkatan-partisipasi-perempuan-di-bidang-politik-hukum-sosial-dan-ekonomi-
URL
bagi-kaum-perempuan
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/700-peran-dp3ap2kb-dalam-peningkatan-kesertaan-keluarga-berencana
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/berita/sekretariat/703-pertemuan-lanjutan-training-of-trainer-8-aksi-konvergensi-percepatan-dalam-penurunan-stunting
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/forum-anak/bengkalis
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/forum-anak/dumai
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/forum-anak/indragiri-hilir
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/forum-anak/indragiri-hulu
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/forum-anak/kampar
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/forum-anak/kep-meranti
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/forum-anak/kuantan-singingi
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/forum-anak/pekanbaru
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/forum-anak/pelalawan
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/forum-anak/provinsi-riau
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/forum-anak/rokan-hilir
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/forum-anak/rokan-hulu
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/forum-anak/siak
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/galeri
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/index.php
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/kontak-kami-gg
Method GET
Parameter
Attack
Method GET
Parameter
Attack
Evidence <form action="/kontak-kami-gg" class="form-validate" method="post" name="emailForm" id="emailForm">
URL https://dpppappkb.riau.go.id/opini/110-opini/420-komitmen-sby-terhadap-perlindungan-anak-dan-perempuan
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/produk-hukum-gg/peraturan-gubernur
Method GET
Parameter
Attack
Method GET
Parameter
Attack
Evidence <form action="https://dpppappkb.riau.go.id/produk-hukum-gg/peraturan-gubernur" method="post" name="adminForm">
URL https://dpppappkb.riau.go.id/produk-hukum-gg/peraturan-pemerintah
Method GET
Parameter
Attack
Method GET
Parameter
Attack
Evidence <form action="https://dpppappkb.riau.go.id/produk-hukum-gg/peraturan-pemerintah" method="post" name="adminForm">
URL https://dpppappkb.riau.go.id/produk-hukum-gg/peraturan-presiden
Method GET
Parameter
Attack
Method GET
Parameter
Attack
Evidence <form action="https://dpppappkb.riau.go.id/produk-hukum-gg/peraturan-presiden" method="post" name="adminForm">
URL https://dpppappkb.riau.go.id/produk-hukum-gg/perda
Method GET
Parameter
Attack
Method GET
Parameter
Attack
Evidence <form action="https://dpppappkb.riau.go.id/produk-hukum-gg/perda" method="post" name="adminForm">
URL https://dpppappkb.riau.go.id/produk-hukum-gg/undang-undang
Method GET
Parameter
Attack
Method GET
Parameter
Attack
Evidence <form action="https://dpppappkb.riau.go.id/produk-hukum-gg/undang-undang" method="post" name="adminForm">
URL https://dpppappkb.riau.go.id/profil-bpppakb
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/profil-bpppakb/alamat
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/profil-bpppakb/sejarah
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/profil-bpppakb/struktur
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/profil-bpppakb/tupoksi
Method GET
Parameter
Attack
URL https://dpppappkb.riau.go.id/profil-bpppakb/visi-misi
Method GET
Parameter
Attack
Instances 102
Phase: Architecture and Design
Use a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid.
For example, use anti-CSRF packages such as the OWASP CSRFGuard.
Phase: Implementation
Ensure that your application is free of cross-site scripting issues, because most CSRF defenses can be bypassed using attacker-controlled script.
Phase: Architecture and Design
Generate a unique nonce for each form, place the nonce into the form, and verify the nonce upon receipt of the form. Be sure that the nonce is not predictable
(CWE-330).
Note that this can be bypassed using XSS.

Solution
Identify especially dangerous operations. When the user performs a dangerous operation, send a separate confirmation request to ensure that the user intended
to perform that operation.
Note that this can be bypassed using XSS.
Use the ESAPI Session Management control.
This control includes a component for CSRF.
Do not use the GET method for any request that triggers a state change.
Phase: Implementation
Check the HTTP Referer header to see if the request originated from an expected page. This could break legitimate functionality, because users or proxies may
have disabled sending the Referer for privacy reasons.
http://projects.webappsec.org/Cross-Site-Request-Forgery
Reference
http://cwe.mitre.org/data/definitions/352.html
CWE Id 352
WASC Id 9
Plugin Id 10202
Medium Content Security Policy (CSP) Header Not Set

Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data
injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware. CSP provides a set of standard HTTP
Description
headers that allow website owners to declare approved sources of content that browsers should be allowed to load on that page — covered types are JavaScript,
CSS, HTML frames, fonts, images and embeddable objects such as Java applets, ActiveX, audio and video files.
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
https://dpppappkb.riau.go.id/berita/keluarga-berencana/624-dp3ap2kb-provinsi-riau-lakukan-advokasi-kebijakan-dan-pendampingan-layanan-perlindungan-
URL
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
ktpattpo
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
tahun-2019
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
URL
ekonomi-kreatif
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
URL
sektor-pembangunan
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
layak-anak-
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/685-dorong-kuantan-singingi-raih-penghargaan-kla-2023-dp3ap2kb-provinsi-riau-perkuat-peran-gugus-
tugas
Method GET
Parameter
Attack
Evidence
URL
provinsi-riau
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
penanganan-stunting
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
https://dpppappkb.riau.go.id/berita/sekretariat/697-serah-terima-jabatan-pejabat-administrasi-di-lingkungan-dinas-pemberdayaan-perempuan-perlindungan-anak-
URL
Method GET
Parameter
Attack
Evidence
URL
bagi-kaum-perempuan
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/cache/
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/components/
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/images/
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/includes/
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/installation/
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/language/
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/libraries/
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/media/
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/modules/
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/plugins/
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/sitemap.xml
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/templates/
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/tmp/
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/xmlrpc/
Method GET
Parameter
Attack
Evidence
Instances 103
Solution Ensure that your web server, application server, load balancer, etc. is configured to set the Content-Security-Policy header.
https://developer.mozilla.org/en-US/docs/Web/Security/CSP/Introducing_Content_Security_Policy
https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html
http://www.w3.org/TR/CSP/
Reference http://w3c.github.io/webappsec/specs/content-security-policy/csp-specification.dev.html
http://www.html5rocks.com/en/tutorials/security/content-security-policy/
http://caniuse.com/#feat=contentsecuritypolicy
http://content-security-policy.com/
CWE Id 693
WASC Id 15
Plugin Id 10038
Medium Missing Anti-clickjacking Header

Description The response does not include either Content-Security-Policy with 'frame-ancestors' directive or X-Frame-Options to protect against 'ClickJacking' attacks.
Method GET
Parameter X-Frame-Options
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
ktpattpo
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
tahun-2019
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
URL
ekonomi-kreatif
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
URL
sektor-pembangunan
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/552-gubri-dan-wagubri-hadiri-peringatan-hari-anak-nasional-tingkat-provinsi-riau-tahun-2018
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
layak-anak-
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
tugas
Method GET
Attack
Evidence
URL
provinsi-riau
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
penanganan-stunting
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
URL
bagi-kaum-perempuan
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
X-Frame-Options
Parameter
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Instances 102
Modern Web browsers support the Content-Security-Policy and X-Frame-Options HTTP headers. Ensure one of them is set on all web pages returned by your
site/app.
Solution
If you expect the page to be framed only by pages on your server (e.g. it's part of a FRAMESET) then you'll want to use SAMEORIGIN, otherwise if you never
expect the page to be framed, you should use DENY. Alternatively consider implementing Content Security Policy's "frame-ancestors" directive.
Reference https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
CWE Id 1021
WASC Id 15
Plugin Id 10020
Low Cookie No HttpOnly Flag

A cookie has been set without the HttpOnly flag, which means that the cookie can be accessed by JavaScript. If a malicious script can be run on this page then
Description
the cookie will be accessible and can be transmitted to another site. If this is a session cookie then session hijacking may be possible.
Method GET
Parameter BP3AKB_tpl
Attack
Evidence Set-Cookie: BP3AKB_tpl
Method GET
Parameter efc8d56796bb1cf0c496d229f18cfcd5
Attack
Evidence Set-Cookie: efc8d56796bb1cf0c496d229f18cfcd5
URL https://dpppappkb.riau.go.id/administrator/
Method GET
Parameter de1436395acceb6331971a7d81f8dc6c
Attack
Evidence Set-Cookie: de1436395acceb6331971a7d81f8dc6c
Method GET
Attack
Method GET
Attack
Method GET
Attack
Method GET
Parameter 670fbee6ffa5f6371ce42b96a3784f3d
Attack
Evidence Set-Cookie: 670fbee6ffa5f6371ce42b96a3784f3d
Instances 7
Solution Ensure that the HttpOnly flag is set for all cookies.
Reference https://owasp.org/www-community/HttpOnly
CWE Id 1004
WASC Id 13
Plugin Id 10010
Low Cookie Without Secure Flag

Description A cookie has been set without the secure flag, which means that the cookie can be accessed via unencrypted connections.
Method GET
Attack
Method GET
Attack
Method GET
Attack
Method GET
Attack
Method GET
Attack
Method GET
Attack
Method GET
Attack
Instances 7
Whenever a cookie contains sensitive information or is a session token, then it should always be passed using an encrypted channel. Ensure that the secure flag
Solution
is set for cookies containing such sensitive information.
https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/06-Session_Management_Testing/02-
Reference
Testing_for_Cookies_Attributes.html
CWE Id 614
WASC Id 13
Plugin Id 10011
Low Cookie without SameSite Attribute

A cookie has been set without the SameSite attribute, which means that the cookie can be sent as a result of a 'cross-site' request. The SameSite attribute is an
Description
effective counter measure to cross-site request forgery, cross-site script inclusion, and timing attacks.
Method GET
Attack
Method GET
Attack
Method GET
Attack
Method GET
Attack
Method GET
Attack
Method GET
Attack
Method GET
Attack
Instances 7
Solution Ensure that the SameSite attribute is set to either 'lax' or ideally 'strict' for all cookies.
Reference https://tools.ietf.org/html/draft-ietf-httpbis-cookie-same-site
CWE Id 1275
WASC Id 13
Plugin Id 10054
Low Secure Pages Include Mixed Content

Description The page includes mixed content, that is content accessed via HTTP instead of HTTPS.
Method GET
Parameter
Attack
Evidence http://img.youtube.com/vi/4_i9zTebxuA/default.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymde5lta3lti2ida4oje4oju5.jpeg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymde5lta4lta3idexojawojuw.png
URL
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiwltexlta2ida1ojiwoja0.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlta5lta4idezojayojm1.jpg
URL
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixltexltayide2oja1ojiw.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixltexltizidexojqyojq1.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta4ltaxide0oje1oja5.jpg
URL
ktpattpo
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta4lte1ide2oju5oju0.jpg
URL
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymde5lta0ltiyidezojq5oje3.jpeg
URL https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan/567-pelatihan-penyusunan-rencana-aksi-program-kerja-pengarusutamaan-gender-di-provinsi-
tahun-2019
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymde5lta3lte4idiyoje0ojmx.jpeg
URL
ekonomi-kreatif
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymde5lteylteyide4ojiyojuw.jpeg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiwltazltexidezojuzoju4.jpeg
URL
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlta1lta1ida0ojezojqz.jpeg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlta5lta5ida5ojq4ojmw.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlta5lta5ide1ojm5oje5.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlta5ltezidexoju1ojiy.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlta5lte0ida5oju1ojey.png
URL https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan/699-peran-dp3ap2kb-meningkatkan-penyediaan-kebutuhan-spesifik-bagi-perempuan-dalam-
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizlta1lte4ida2oja4ojux.jpeg
URL
sektor-pembangunan
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizlta1lti5idiwoji5ojmx.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlta3lta3idixojmzoju2.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymde5lta3lti2idiyojeyojq5.png
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymde5lta4lta3idizoju3ojuz.jpeg
URL
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiwlta3ltizidiyojiwojex.jpeg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlta2lta2ida4oja1ojq5.png
URL
layak-anak-
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlta3lta3idixojmzoju2.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlta3lti0ida5oje4oje0.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlta3lti0ida5ojm3oja0.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlta3lti5idixoji0ojix.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixltewltmxida5ojq4ojmw.jpg
URL
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltayltixida5ojuxojq5.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltewlti4ida4ojuyoja4.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltewlti4ida4oji5oje1.jpg
URL
tugas
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizltaylte5idewoje3ojq5.jpg
URL
provinsi-riau
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizlta1lti4ide2ojawojaw.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymde5lta4lte3idaxoju0oji2.jpeg
URL https://dpppappkb.riau.go.id/berita/sekretariat/620-penguatan-kerjasama-pelaksanaan-pendidikan-kependudukan-jalur-formal-nonformal-dan-informal
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixltewltixida5oja0ojqy.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/622-upaya-dp3ap2kb-provinsi-riau-dalam-percepatan-penurunan-stunting-di-kabupaten-rokan-hilir-tahun-2021
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixltewlti2ide1ojq1oju4.jpg
https://dpppappkb.riau.go.id/berita/sekretariat/625-upaya-dp3ap2kb-provinsi-riau-dalam-tingkatkan-partisipasi-perempuan-di-bidang-politik-hukum-sosial-dan-
URL
ekonomi
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixltexlteyidewoju4ojqx.jpg
https://dpppappkb.riau.go.id/berita/sekretariat/626-pengukuhan-forum-komunikasi-partisipasi-publik-untuk-kesejahteraan-perempuan-dan-anak-pupsa-lancang-
URL
kuning-provinsi-riau-periode-2021-2023
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixltexlte2ide1ojq1oje1.jpg
https://dpppappkb.riau.go.id/berita/sekretariat/628-dp3ap2kb-provinsi-lakukan-pertemuan-koordinasi-dan-pembinaan-ketahanan-keluarga-di-kabupaten-indragiri-
URL
hilir
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixltexlti2ida5ojqyojew.jpg
https://dpppappkb.riau.go.id/berita/sekretariat/629-dp3ap2kb-provinsi-riau-tingkatkan-partisipasi-perempuan-di-bidang-politik-hukum-sosial-dan-ekonomi-di-
URL
kabupaten-indragiri-hilir
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixltexlti5idexojm0oju0.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/630-dp3ap2kb-provinsi-lakukan-pembinaan-pada-pusat-informasi-konseling-remaja-pik-r-smu-n-5-pekanbaru
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixltexltmwideyoje2ojq1.jpg
https://dpppappkb.riau.go.id/berita/sekretariat/631-dp3ap2kb-provinsi-riau-mengadakan-sosialisasi-peningkatan-partisipasi-perempuan-di-bidang-politik-hukum-
URL
sosial-dan-ekonomi-di-kab-kampar
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlteyltayide1ojexojaw.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/632-dp3ap2kb-provinsi-riau-tingkatkan-koordinasi-dan-pembinaan-ketahanan-keluarga-di-kota-pekanbaru
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlteylta1idexojq1oju5.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/633-dp3ap2kb-provinsi-riau-hadiri-peringatan-hari-anak-tingkat-kabupaten-kampar-tahun-2021
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlteylta3ide2oje5ojqy.jpg
https://dpppappkb.riau.go.id/berita/sekretariat/634-dp3ap2kb-lakukan-sosialisasi-peningkatan-pertisipasi-perempuan-dibidang-politik-hukum-sosila-dan-ekonomi-
URL
lanjutan-di-kabupaten-inhil
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlteylta3ide2oji3oju5.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/635-asisten-i-bersama-dp3ap2kb-hadiri-forum-nasional-stunting-secara-virtua
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlteylte2ida5ojq3oja3.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/636-bak-model-hj-misnarni-tampil-memukau-di-peringati-hari-ibu-tingkat-provinsi
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlteylti0ida4oju2ojm4.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/637-peringati-hari-ibu-pemprov-riau-dorong-perempuan-terus-berkarya
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdixlteylti0ida5oja0ojmy.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/638-puncak-rangkaian-peringati-hari-ibu-pemprov-riau-dorong-perempuan-kenali-kanker-serviks-sejak-dini
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltaxlta1ide2ojayoji2.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/639-pelepasan-pegawai-pensiun-masa-purna-bakti-di-ligkungan-dp3ap2kb-provinsi-riau-2021
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltaxlta2idezoju5ojux.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/640-dp3ap2kb-provinsi-riau-laksanakan-apel-perdana-di-awal-tahun-2022
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltaxltexide0ojm1oja0.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/641-dp3ap2kb-terima-kunjungan-bem-unri-kabinet-kreator-pergerakan
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltaxlte5idewoju2ojm1.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/643-upaya-percepatan-penurunan-stunting-provinsi-riau-bentuk-tim-percepatan-penurunan-stunting
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltaylti2idixojm0ojqy.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/644-sertijab-kepala-dinas-p3ap2kb-provinsi-riau
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltazlte2idezoji2ojmy.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/645-dinas-p3ap2kb-provinsi-riau-terima-kunjungan-kerja-dprd-kepulauan-meranti
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltazlte2ide3oja4ojq1.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/646-terima-pengaduan-masyarakat-kepala-dinas-p3ap2kb-provinsi-riau-langsung-kunjungi-anak-korban-kdrt-di-siak
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltazlte4idexojmxoji3.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/647-dp3ap2kb-tingkatkan-advokasi-pendampingan-layanan-perlindungan-perempuan-wewenang-provinsi
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltazlti1ide2ojm0ojey.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/649-dalam-rangka-sosialisasi-advokasi-kebijakan-pendampingan-pelaksanaan-pug-dp3ap2kb-selenggarakan-
bimtek-pprg-bagi-opd-se-provinsi-riau
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta0lta0ide0ojqxoju0.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/650-gandeng-pemprov-riau-kementeriaan-pppa-laksanakan-kegiatan-peningkatan-kualitas-keluarga
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta0lta0ide0ojq2oju5.jpg
https://dpppappkb.riau.go.id/berita/sekretariat/651-dp3ap2kb-provinsi-riau-selaraskan-program-dan-kegiatan-melalui-forum-perangkat-daerah-tingkat-provinsi-
URL
dan-kabkota
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta0lte1ide1ojmxoju2.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/653-sempena-hari-kartini-2022-gubernur-beri-penghargaan-untuk-dua-belas-perempuan-tangguh-di-provinsi-riau
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta0ltizidexojeyojq2.jpg
https://dpppappkb.riau.go.id/berita/sekretariat/655-singkronisasi-program-pusat-dan-daerah-dp3ap2kb-provinsi-lakukan-audiensi-di-kantor-kementrian-
URL
pemberdayaan-perempuan-dan-perlindungan-anak-jakarta
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta0lti2ideyojmzoja4.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/656-dp3ap2kb-nyalakan-semangat-ramadhan-bermasa-lampu-colok
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta1ltaxidexojqwojaz.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/657-optimalkan-bonus-demografi-dp3ap2kb-provinsi-riau-taja-advokasi-dan-sosialisasi-gdpk-tahun-2022
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta1ltizidexoja4ojey.png
https://dpppappkb.riau.go.id/berita/sekretariat/658-pembentukan-kelompok-kerja-perlindungan-dan-pemberdayaan-perempuan-dan-anak-dalam-konflik-sosial-
URL
pokja-p3aks
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta2lte4ide0oja0oji1.png
URL https://dpppappkb.riau.go.id/berita/sekretariat/659--kunjungi-kejati-riau-pengurus-forum-anak-riau-perkuat-peran-pelopor-dan-pelapor
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta2ltiyida3ojm4oju1.png
https://dpppappkb.riau.go.id/berita/sekretariat/660-penyediaan-kebutuhan-spesifikasi-bagi-perempuan-dalam-situasi-darurat-dan-kondisi-khusus-melalui-
URL
pelatihan-penguatan-bagi-orang-tua-yang-memiliki-anak-disabilitas
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta2ltiyidexoja1ojm5.png
URL https://dpppappkb.riau.go.id/berita/sekretariat/662-pemberian-kartu-identitas-kepada-korban-kekerasan-anak-dibawah-umur
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta3ltaxide0oja4ojaz.png
URL https://dpppappkb.riau.go.id/berita/sekretariat/663-perkuat-puspaga-pemerintah-provinsi-optimalkan-layanan-pengasuhan-berbasis-pemenuhan-hak-anak
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta3ltayide0oja3ojm2.png
https://dpppappkb.riau.go.id/berita/sekretariat/665-dp3ap2kb-provinsi-riau-upayakan-peningkatan-kapasitas-dan-peran-serta-mitra-pada-pengelolaan-poktan-
URL
ketahanan-keluarga
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta4lta0idiwojqzoja0.jpg
https://dpppappkb.riau.go.id/berita/sekretariat/666-advokasi-kebijakan-dan-pendampingan-peningkatan-partisipasi-perempuan-dalam-politik-hukum-sosial-dan-
URL
ekonomi-kewenangan-provinsi-perempuan
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta4lta5ida3oji4ojay.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/668-gojek-gandeng-dp3ap2kb-dukung-mitra-driver-jadi-pelopor-ciptakan-ruang-publik-aman
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylta4lti5idexojm3ojq0.jpg
https://dpppappkb.riau.go.id/berita/sekretariat/671-turun-langsung-ke-kuantan-singingi-kadis-p3ap2kb-provinsi-riau-pastikan-pemprov-riau-serius-dalam-
URL
penanganan-stunting-
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltewltmxide1ojq0ojuy.png
URL https://dpppappkb.riau.go.id/berita/sekretariat/672-penandatanganan-perjanjian-kerjasama-pks-dengan-stakeholders-dan-konferensi-kasus-untuk-peningkatan-
pelayanan-upt-perlindungan-perempuan-dan-anak-dinas-p3ap2kb-provinsi-riau
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltexltaxide1ojezojm2.png
https://dpppappkb.riau.go.id/berita/sekretariat/673-penandatanganan-perjanjian-kerjasama-pks-dengan-stakeholders-dan-konferensi-kasus-untuk-peningkatan-
URL
pelayanan-upt-perlindungan-perempuan-dan-anak-dinas-p3ap2kb-provinsi-riau
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltexltazide2ojmxoju2.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/674-kunjungi-riau-manteri-pppa-ri-launching-drppa-di-indragiri-hulu
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiyltexlteyidiyojayoja2.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/675-tuntaskan-pkn-tingkat-ii-kadis-p3ap2kb-provinsi-riau-menjadi-satu-satunya-perempuan-di-peringkat-10-besar
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylteyltezide4ojq2ojm0.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/677-wisuda-angkatan-2022-akademi-paradigta-indonesia-api
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylteylte1ide0ojm1ojiw.jpeg
https://dpppappkb.riau.go.id/berita/sekretariat/678-kadis-p3ap2kb-provinsi-riau-serahkan-piagam-standardisasi-sekolah-ramah-anak-mts-muhammadiyah-02-
URL
pekanbaru
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylteylte2ida3ojazojq5.jpg
https://dpppappkb.riau.go.id/berita/sekretariat/680-kadis-dp3ap2kb-provinsi-riau-menghadiri-pengukuhan-puspaga-bunga-kencung-dan-pelantikan-forum-anak-
URL
pelalawan-periode-2022-2024
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylteylte2ida3oji3ojaz.jpg
URL https://dpppappkb.riau.go.id/berita/sekretariat/681-tekankan-pentingnya-peran-perempuan-dalam-pembangunan-gubernur-ajak-kaum-ibu-tingkatkan-kualitas-diri
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylteylti5ida5oje2ojqz.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdiylteyltmwidewoji0oju5.jpeg
URL
penanganan-stunting
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizltaxlta0idexojixoju5.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizltaxlti3ida4ojq5ojm3.jpeg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizltaylti4idexojezojaz.jpeg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizltazltaxide2ojmzojm1.jpeg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizltazltayida4ojmxojqy.png
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizltazlta3ida5ojq2oja5.png
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizltazltezidewojm3ojm2.png
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizltazltezidewoju4oje0.png
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizltazlte0idexoji4oju0.png
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizltazlte1ide3ojq4oji0.png
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizltazlti0ida3ojq1ojax.jpeg
URL
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizltazlti0ida3oju4ojey.png
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizlta0lta4ida1ojizojuy.jpg
URL
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizlta1lta5idexojm2oje4.jpg
URL
bagi-kaum-perempuan
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizlta1lte4ida2ojawoja0.jpeg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizlta1lti3idazoja4ojm4.jpg
Method GET
Parameter
Attack
Evidence http://www.riau.go.id/home/wysiwyg-gambar-skpd/wide-riau-b2ppu2f0cmlhbmkymdizlta1ltmwide0ojexoje4.jpg
Method GET
Parameter
Attack
Evidence http://img.youtube.com/vi/4_i9zTebxuA/default.jpg
Instances 102
A page that is available over SSL/TLS must be comprised completely of content which is transmitted over SSL/TLS.
Solution The page must not contain any content that is transmitted over unencrypted HTTP.
This includes content from third party sites.

Reference https://cheatsheetseries.owasp.org/cheatsheets/Transport_Layer_Protection_Cheat_Sheet.html
CWE Id 311
WASC Id 4
Plugin Id 10040
Low Strict-Transport-Security Header Not Set

HTTP Strict Transport Security (HSTS) is a web security policy mechanism whereby a web server declares that complying user agents (such as a web browser)
Description are to interact with it using only secure HTTPS connections (i.e. HTTP layered over TLS/SSL). HSTS is an IETF standards track protocol and is specified in RFC
6797.
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
ktpattpo
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
tahun-2019
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
URL
ekonomi-kreatif
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
URL
sektor-pembangunan
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
layak-anak-
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
tugas
Method GET
Parameter
Attack
Evidence
URL
provinsi-riau
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL
Method GET
Parameter
Attack
Evidence
URL
bagi-kaum-perempuan
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/cache/
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/robots.txt
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/sitemap.xml
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
URL https://dpppappkb.riau.go.id/tmp/
Method GET
Parameter
Attack
Evidence
Method GET
Parameter
Attack
Evidence
Instances 102
Solution Ensure that your web server, application server, load balancer, etc. is configured to enforce Strict-Transport-Security.
Reference https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Strict_Transport_Security_Cheat_Sheet.html
https://owasp.org/www-community/Security_Headers
http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
http://caniuse.com/stricttransportsecurity
http://tools.ietf.org/html/rfc6797
CWE Id 319
WASC Id 15
Plugin Id 10035
Low X-Content-Type-Options Header Missing

The Anti-MIME-Sniffing header X-Content-Type-Options was not set to 'nosniff'. This allows older versions of Internet Explorer and Chrome to perform MIME-
Description sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the declared content type.
Current (early 2014) and legacy versions of Firefox will use the declared content type (if one is set), rather than performing MIME-sniffing.
Method GET
Parameter X-Content-Type-Options
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
ktpattpo
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
tahun-2019
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
URL
ekonomi-kreatif
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
URL
sektor-pembangunan
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
layak-anak-
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
tugas
Method GET
Attack
Evidence
URL
provinsi-riau
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/sekretariat/683-sekretariat-tim-percepatan-penurunan-stunting-tpps-provinsi-riau-menyelenggarakan-rapat-optimalisasi-
penanganan-stunting
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL
Method GET
Attack
Evidence
URL
bagi-kaum-perempuan
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Instances 102
Ensure that the application/web server sets the Content-Type header appropriately, and that it sets the X-Content-Type-Options header to 'nosniff' for all web
pages.
Solution
If possible, ensure that the end user uses a standards-compliant and modern web browser that does not perform MIME-sniffing at all, or that can be directed by
the web application/web server to not perform MIME-sniffing.
http://msdn.microsoft.com/en-us/library/ie/gg622941%28v=vs.85%29.aspx
Reference
https://owasp.org/www-community/Security_Headers
CWE Id 693
WASC Id 15
Plugin Id 10021
Informational Re-examine Cache-control Directives

The cache-control header has not been set properly or is missing, allowing the browser and proxies to cache content. For static assets like css, js, or image files
Description
this might be intended, however, the resources should be reviewed to ensure that no sensitive content will be cached.
URL https://dpppappkb.riau.go.id/berita/133-sekretariat/471-anugerah-baiduri-wujud-apresiasi-bagi-kaum-perempuan?format=pdf
Method GET
Parameter Cache-Control
Attack
Evidence
https://dpppappkb.riau.go.id/berita/133-sekretariat/653-sempena-hari-kartini-2022-gubernur-beri-penghargaan-untuk-dua-belas-perempuan-tangguh-di-provinsi-
URL
riau?format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/133-sekretariat/657-optimalkan-bonus-demografi-dp3ap2kb-provinsi-riau-taja-advokasi-dan-sosialisasi-gdpk-tahun-2022?
URL
format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/133-sekretariat/658-pembentukan-kelompok-kerja-perlindungan-dan-pemberdayaan-perempuan-dan-anak-dalam-konflik-
URL
sosial-pokja-p3aks?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/133-sekretariat/659--kunjungi-kejati-riau-pengurus-forum-anak-riau-perkuat-peran-pelopor-dan-pelapor?format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/133-sekretariat/660-penyediaan-kebutuhan-spesifikasi-bagi-perempuan-dalam-situasi-darurat-dan-kondisi-khusus-melalui-
URL
pelatihan-penguatan-bagi-orang-tua-yang-memiliki-anak-disabilitas?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/133-sekretariat/662-pemberian-kartu-identitas-kepada-korban-kekerasan-anak-dibawah-umur?format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/133-sekretariat/663-perkuat-puspaga-pemerintah-provinsi-optimalkan-layanan-pengasuhan-berbasis-pemenuhan-hak-anak?
URL
format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/133-sekretariat/671-turun-langsung-ke-kuantan-singingi-kadis-p3ap2kb-provinsi-riau-pastikan-pemprov-riau-serius-dalam-
URL
penanganan-stunting-?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/133-sekretariat/672-penandatanganan-perjanjian-kerjasama-pks-dengan-stakeholders-dan-konferensi-kasus-untuk-
peningkatan-pelayanan-upt-perlindungan-perempuan-dan-anak-dinas-p3ap2kb-provinsi-riau?format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/133-sekretariat/675-tuntaskan-pkn-tingkat-ii-kadis-p3ap2kb-provinsi-riau-menjadi-satu-satunya-perempuan-di-peringkat-10-
URL
besar?format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/133-sekretariat/688-strategi-komunikasi-adalah-kunci-perubahan-perilaku-dalam-percepatan-menurunkan-kasus-stunting-di-
URL
riau?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/133-sekretariat/689-dorong-penurunan-stunting-melalui-penguatan-kelembagaan-tpps-provinsi-riau?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/133-sekretariat/690-dp3ap2kb-riau-dorong-cegah-stunting-secara-dini?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/133-sekretariat/691-penguatan-kapasitas-standar-layanan-perlindungan-perempuan-dan-anak?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/133-sekretariat/692-stop-kekerasan-terhadap-perempuan-dan-anak?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/133-sekretariat/693-wujudkan-provila-tahun-2023-dp3ap2kb-provinsi-riau-laksanakan-rakortek-percepatan-kla?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/133-sekretariat/695-kolaborasi-strategi-komunikasi-perubahan-perilaku-skpp-dalam-upaya-percepatan-penurunan-stunting-
bersama-lsm-dan-perusahaan?format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/134-pemberdayaan-perempuan/702-puncak-peringatan-hari-kartini-mari-kita-wujudkan-perempuan-riau-ungul-dalam-berbagai-
URL
sektor-pembangunan?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/138-perlindungan-anak/670-patbm-ujung-tombak-pemenuhan-hak-dan-perlindungan-khusus-anak?format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/keluarga-berencana/571-penguatan-gugus-tugas-pencegahan-dan-penangan-tindak-pidana-perdagangan-orang-tppo?
URL
format=pdf
Method GET
Attack
Evidence
URL
tahun-2019?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan/609-pelatihan-pendidikan-politik-bagi-perempuan?format=pdf
Method GET
Attack
Evidence
URL
sektor-pembangunan?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/569-riau-raih-dua-penghargaan-pada-anugerah-kla-tahun-2019-di-makassar-?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/592-manajemen-emosi-orang-tua-saat-mendampingi-anak-daring?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/601-lagi-provinsi-riau-raih-penghargaan-nasional-?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/perlindungan-anak/670-patbm-ujung-tombak-pemenuhan-hak-dan-perlindungan-khusus-anak?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/pug-dan-pkhp/573-pelatihan-pug-dan-puha-bagi-lembaga-profesi-dan-dunia-usaha?format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/sekretariat/653-sempena-hari-kartini-2022-gubernur-beri-penghargaan-untuk-dua-belas-perempuan-tangguh-di-provinsi-riau?
URL
format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/sekretariat/657-optimalkan-bonus-demografi-dp3ap2kb-provinsi-riau-taja-advokasi-dan-sosialisasi-gdpk-tahun-2022?
URL
format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/sekretariat/658-pembentukan-kelompok-kerja-perlindungan-dan-pemberdayaan-perempuan-dan-anak-dalam-konflik-sosial-
URL
pokja-p3aks?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/sekretariat/659--kunjungi-kejati-riau-pengurus-forum-anak-riau-perkuat-peran-pelopor-dan-pelapor?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/sekretariat/660-penyediaan-kebutuhan-spesifikasi-bagi-perempuan-dalam-situasi-darurat-dan-kondisi-khusus-melalui-
pelatihan-penguatan-bagi-orang-tua-yang-memiliki-anak-disabilitas?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/sekretariat/662-pemberian-kartu-identitas-kepada-korban-kekerasan-anak-dibawah-umur?format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/sekretariat/663-perkuat-puspaga-pemerintah-provinsi-optimalkan-layanan-pengasuhan-berbasis-pemenuhan-hak-anak?
URL
format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/sekretariat/671-turun-langsung-ke-kuantan-singingi-kadis-p3ap2kb-provinsi-riau-pastikan-pemprov-riau-serius-dalam-
URL
penanganan-stunting-?format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/sekretariat/672-penandatanganan-perjanjian-kerjasama-pks-dengan-stakeholders-dan-konferensi-kasus-untuk-peningkatan-
URL
pelayanan-upt-perlindungan-perempuan-dan-anak-dinas-p3ap2kb-provinsi-riau?format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/sekretariat/675-tuntaskan-pkn-tingkat-ii-kadis-p3ap2kb-provinsi-riau-menjadi-satu-satunya-perempuan-di-peringkat-10-besar?
URL
format=pdf
Method GET
Attack
Evidence
https://dpppappkb.riau.go.id/berita/sekretariat/688-strategi-komunikasi-adalah-kunci-perubahan-perilaku-dalam-percepatan-menurunkan-kasus-stunting-di-riau?
URL
format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/sekretariat/689-dorong-penurunan-stunting-melalui-penguatan-kelembagaan-tpps-provinsi-riau?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/sekretariat/690-dp3ap2kb-riau-dorong-cegah-stunting-secara-dini?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/sekretariat/691-penguatan-kapasitas-standar-layanan-perlindungan-perempuan-dan-anak?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/sekretariat/692-stop-kekerasan-terhadap-perempuan-dan-anak?format=pdf
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita/sekretariat/693-wujudkan-provila-tahun-2023-dp3ap2kb-provinsi-riau-laksanakan-rakortek-percepatan-kla?format=pdf
Method GET
Attack
Evidence
URL
bersama-lsm-dan-perusahaan?format=pdf
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/curhat/feed/com_content/1
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
URL https://dpppappkb.riau.go.id/pengaduan/feed/com_jcomments/1
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method GET
Attack
Evidence
Method POST
Attack
Evidence
Method POST
Attack
Evidence
Instances 60
For secure content, ensure the cache-control HTTP header is set with "no-cache, no-store, must-revalidate". If an asset should be cached consider setting the
Solution
directives "public, max-age, immutable".
https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html#web-content-caching
Reference https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control
https://grayduck.mn/2021/09/13/cache-control-recommendations/
CWE Id 525
WASC Id 13
Plugin Id 10015
Informational User Controllable HTML Element Attribute (Potential XSS)

This check looks at user-supplied input in query string parameters and POST data to identify where certain HTML attribute values might be controlled. This
Description
provides hot-spot detection for XSS (cross-site scripting) that will require further review by a security analyst to determine exploitability.
URL https://dpppappkb.riau.go.id/berita/pemberdayaan-perempuan?start=10
Method GET
Parameter start
Attack
Evidence
Method GET
Parameter start
Attack
Evidence
Method GET
Parameter start
Attack
Evidence
URL https://dpppappkb.riau.go.id/berita?start=10
Method GET
Parameter start
Attack
Evidence
Method GET
Parameter start
Attack
Evidence
Method GET
Parameter start
Attack
Evidence
https://dpppappkb.riau.go.id/component/mailto/?
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvc2VrcmV0YXJpYXQvNjk0LWRwM2FwMmtiLXByb3ZpbnNpLXJpYXUtcGFjdS1wZXJjZXBhdG
FuLXB1cnVuYW4tc3R1bnRpbmc%3D&tmpl=component
Method GET
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvc2VrcmV0YXJpYXQvNjk1LWtvbGFib3Jhc2ktc3RyYXRlZ2kta29tdW5pa2FzaS1wZXJ1YmFoY
URL
W4tcGVyaWxha3Utc2twcC1kYWxhbS11cGF5YS1wZXJjZXBhdGFuLXBlbnVydW5hbi1zdHVudGluZy1iZXJzYW1hLWxzbS1kYW4tcGVydXNhaGFhbg%3D%3D&t
mpl=component
Method GET
Parameter link
Attack
Evidence
URL
mpl=component
Method GET
Parameter tmpl
Attack
Evidence
URL
mpl=component
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvc2VrcmV0YXJpYXQvNjk2LW9wdGltYWxrYW4tZXZhbHVhc2kta2xhLTIwMjMtcGVtZXJpbnRh
aC1wcm92aW5zaS1yaWF1LWJlbnR1ay10aW0tdmVyaWZpa2FzaS1hZG1pbmlzdHJhc2k%3D&tmpl=component
Method GET
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvc2VrcmV0YXJpYXQvNjk3LXNlcmFoLXRlcmltYS1qYWJhdGFuLXBlamFiYXQtYWRtaW5pc3R
URL
yYXNpLWRpLWxpbmdrdW5nYW4tZGluYXMtcGVtYmVyZGF5YWFuLXBlcmVtcHVhbi1wZXJsaW5kdW5nYW4tYW5hay1wZW5nZW5kYWxpYW4tcGVuZHVkdWs
tZGFuLWtlbHVhcmdhLWJlcmVuY2FuYS1wcm92aW5zaS1yaWF1&tmpl=component
Method GET
Parameter link
Attack
Evidence
URL
Method GET
Parameter tmpl
Attack
Evidence
URL
Method GET
Parameter tmpl
Attack
Evidence
link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvc2VrcmV0YXJpYXQvNjk4LWRpbmFzLXAzYTJwa2ItbWVuZG9yb25nLXBlbmluZ2thdGFuLXB
URL
hcnRpc2lwYXNpLXBlcmVtcHVhbi1kaS1iaWRhbmctcG9saXRpay1odWt1bS1zb3NpYWwtZGFuLWVrb25vbWktYmFnaS1rYXVtLXBlcmVtcHVhbg%3D%3D&tmpl=
component
Method GET
Parameter link
Attack
Evidence
URL
component
Method GET
Parameter tmpl
Attack
Evidence
URL
component
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvc2VrcmV0YXJpYXQvNjkzLXd1anVka2FuLXByb3ZpbGEtdGFodW4tMjAyMy1kcDNhcDJrYi1w
cm92aW5zaS1yaWF1LWxha3NhbmFrYW4tcmFrb3J0ZWstcGVyY2VwYXRhbi1rbGE%3D&tmpl=component
Method GET
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvc2VrcmV0YXJpYXQvNzAwLXBlcmFuLWRwM2FwMmtiLWRhbGFtLXBlbmluZ2thdGFuLWtlc2
VydGFhbi1rZWx1YXJnYS1iZXJlbmNhbmE%3D&tmpl=component
Method GET
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvc2VrcmV0YXJpYXQvNzAzLXBlcnRlbXVhbi1sYW5qdXRhbi10cmFpbmluZy1vZi10cmFpbmVy
LTgtYWtzaS1rb252ZXJnZW5zaS1wZXJjZXBhdGFuLWRhbGFtLXBlbnVydW5hbi1zdHVudGluZw%3D%3D&tmpl=component
Method GET
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcGVtYmVyZGF5YWFuLXBlcmVtcHVhbi81NzAtcGVuZ3VhdGFuLWthcGFzaXRhcy1zZG0tZGl
URL
uYXMtcGVtYmVyZGF5YWFuLXBlcmVtcHVhbi1kYW4tcGVybGluZHVuZ2FuLWFuYWstdGVya2FpdC1wdWctZGFuLXBwcmctZGktcHJvdmluc2ktcmlhdQ%3D%3D
&tmpl=component
Method GET
Parameter link
Attack
Evidence
URL
&tmpl=component
Method GET
Parameter tmpl
Attack
Evidence
URL
&tmpl=component
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcGVtYmVyZGF5YWFuLXBlcmVtcHVhbi81NzgtcGVsYXRpaGFuLXBlbmd1YXRhbi1rZWxlbW
JhZ2Fhbi1wZW5nYXJ1c3RhbWFhbi1nZW5kZXItcHVn&tmpl=component
Method GET
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcGVtYmVyZGF5YWFuLXBlcmVtcHVhbi81NzYtc2VtcGVuYS1oYXJpLWlidS1rZS05MS10cC1
wa2stcHJvdmluc2ktcmlhdS1nYW5kZW5nLWRpbmFzLXBwcGEtdGFqYS1wYW1lcmFuLXBlcmVtcHVhbi1la29ub21pLWtyZWF0aWY%3D&tmpl=component
Method GET
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcGVtYmVyZGF5YWFuLXBlcmVtcHVhbi81OTEtcGVyY2VwYXQtcGVuZ2FydXN1dGFtYWFuL
URL
WdlbmRlci1kaW5hcy1wM2FwMmtiLXByb3ZpbnNpLXJpYXUtbGFrc2FuYWthbi1zb3NpYWxpc2FzaS1wZW5naW5wdXRhbi1wcHJnLWJlcmJhc2lzLW9ubGluZQ%
3D%3D&tmpl=component
Method GET
Parameter link
Attack
Evidence
URL
Method GET
Parameter tmpl
Attack
Evidence
URL
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcGVtYmVyZGF5YWFuLXBlcmVtcHVhbi82MDgtcGVsYXRpaGFuLXBlbmRpZGlrYW4tcG9saX
Rpay1iYWdpLXBlcmVtcHVhbg%3D%3D&tmpl=component
Method GET
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcGVtYmVyZGF5YWFuLXBlcmVtcHVhbi82MDktcGVsYXRpaGFuLXBlbmRpZGlrYW4tcG9saX
Method GET
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcGVtYmVyZGF5YWFuLXBlcmVtcHVhbi82MDUtcGVudWhpLWhhay1hbmFrLXdha2lsLWtldHV
hLXBray1yaWF1LXRla2Fua2FuLXBlbnRpbmdueWEtcG9sYS1wZW5nYXN1aGFu&tmpl=component
Method GET
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcGVtYmVyZGF5YWFuLXBlcmVtcHVhbi82MDYtcGVsYXRpaGFuLXBlbmRpZGlrYW4tcG9sa
XRpay1iYWdpLXBlcmVtcHVhbg%3D%3D&tmpl=component
Method GET
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcGVtYmVyZGF5YWFuLXBlcmVtcHVhbi82OTktcGVyYW4tZHAzYXAya2ItbWVuaW5na2F0a2
URL
FuLXBlbnllZGlhYW4ta2VidXR1aGFuLXNwZXNpZmlrLWJhZ2ktcGVyZW1wdWFuLWRhbGFtLXNpdHVhc2ktZGFydXJhdC1kYW4ta29uZGlzaS1raHVzdXM%3D&t
mpl=component
Method GET
Parameter link
Attack
Evidence
URL
mpl=component
Method GET
Parameter tmpl
Attack
Evidence
URL
mpl=component
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcGVtYmVyZGF5YWFuLXBlcmVtcHVhbi83MDItcHVuY2FrLXBlcmluZ2F0YW4taGFyaS1rYXJ0
aW5pLW1hcmkta2l0YS13dWp1ZGthbi1wZXJlbXB1YW4tcmlhdS11bmd1bC1kYWxhbS1iZXJiYWdhaS1zZWt0b3ItcGVtYmFuZ3VuYW4%3D&tmpl=component
GET
Method
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcGVybGluZHVuZ2FuLWFuYWsvNzAxLWlrdXRpLXZlcmlmaWthc2ktbGFwYW5nYW4taHlicmlk
LWthZGlzLXAzYXAya2ItcHJvdmluc2ktcmlhdS1hcHJlc2lhc2ktcGVtZXJpbnRhaC1rYWJ1cGF0ZW5rb3RhLWRpLXByb3ZpbnNpLXJpYXU%3D&tmpl=component
Method GET
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcHVnLWRhbi1wa2hwLzU1MS10aW5na2F0a2FuLXBlcmFuLW1hc3lhcmFrYXQtZGluYXMtcH
BwYS1pbnRlbnNpZmthbi1wZW1iZW50dWthbi1wdXNwYS1kaS1wcm92aW5zaS1yaWF1&tmpl=component
Method GET
Parameter link
Attack
Evidence
URL https://dpppappkb.riau.go.id/component/mailto/?
link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcHVnLWRhbi1wa2hwLzU1MS10aW5na2F0a2FuLXBlcmFuLW1hc3lhcmFrYXQtZGluYXMtcH
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcHVnLWRhbi1wa2hwLzU1MS10aW5na2F0a2FuLXBlcmFuLW1hc3lhcmFrYXQtZGluYXMtcH
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcHVnLWRhbi1wa2hwLzU2MC10aW5na2F0a2FuLWt1YWxpdGFzLXBlbWJpbmFhbi1vcmdhb
mlzYXNpLXBlcmVtcHVhbg%3D%3D&tmpl=component
Method GET
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcHVnLWRhbi1wa2hwLzU3My1wZWxhdGloYW4tcHVnLWRhbi1wdWhhLWJhZ2ktbGVtYmFnY
S1wcm9mZXNpLWRhbi1kdW5pYS11c2FoYQ%3D%3D&tmpl=component
Method GET
Parameter link
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcHVnLWRhbi1wa2hwLzU3My1wZWxhdGloYW4tcHVnLWRhbi1wdWhhLWJhZ2ktbGVtYmFnY
Method GET
Parameter tmpl
Attack
Evidence
URL https://dpppappkb.riau.go.id/component/mailto/?
link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcHVnLWRhbi1wa2hwLzU3My1wZWxhdGloYW4tcHVnLWRhbi1wdWhhLWJhZ2ktbGVtYmFnY
Method GET
Parameter tmpl
Attack
Evidence
URL link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcHVnLWRhbi1wa2hwLzUzOC1yaWF1LW1hc3VrLTE1LWJlc2FyLXByZXNlbnRhc2ktdGVtdS1
wdXNwYS1uYXNpb25hbC1kaS1zdXJhYmF5YQ%3D%3D&tmpl=component
Method GET
Parameter link
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
Method GET
Parameter tmpl
Attack
Evidence
link=aHR0cHM6Ly9kcHBwYXBwa2IucmlhdS5nby5pZC9iZXJpdGEvcHVnLWRhbi1wa2hwLzUzOS1wZWxhbnRpa2FuLWZvcnVtLWtvbXVuaWthc2ktcGFydGlzaXB
URL
hc2ktcHVibGlrLXVudHVrLWtlc2VqYWh0ZXJhYW4tcGVyZW1wdWFuLWRhbi1hbmFrLWZvcmtvbWRhLXB1c3BhLWxhbmNhbmcta3VuaW5nLXBlcmlvZGUtMjAxN
y0yMDE5&tmpl=component
Method GET
Parameter link
Attack
Evidence
URL
Method GET
Parameter tmpl
Attack
Evidence
URL
Method GET
Parameter tmpl
Attack
Evidence
Instances 78
Solution Validate all input and sanitize output it before writing to any HTML attributes.
Reference http://websecuritytool.codeplex.com/wikipage?title=Checks#user-controlled-html-attribute
CWE Id 20
WASC Id 20
Plugin Id 10031

OWASP ZAP Scan Report

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

OWASP ZAP Scan Report

Uploaded by

Copyright:

Available Formats

OWASP ZAP Scan Report

Javascript included from: https://dpppappkb.riau.go.id

Risk Level Number of Alerts

Name Risk Level Number of Instances

Absence of Anti-CSRF Tokens Medium 102

Medium Absence of Anti-CSRF Tokens

CSRF attacks are effective in a number of situations, including:

* The victim has an active session on the target site.

* The victim is on the same local network as the target site.

For example, use anti-CSRF packages such as the OWASP CSRFGuard.

Phase: Architecture and Design

Note that this can be bypassed using XSS.

Note that this can be bypassed using XSS.

Use the ESAPI Session Management control.

This control includes a component for CSRF.

Medium Content Security Policy (CSP) Header Not Set

Medium Missing Anti-clickjacking Header

Low Cookie No HttpOnly Flag

Low Cookie Without Secure Flag

Low Cookie without SameSite Attribute

Low Secure Pages Include Mixed Content

This includes content from third party sites.

Low Strict-Transport-Security Header Not Set

Low X-Content-Type-Options Header Missing

Informational Re-examine Cache-control Directives

Informational User Controllable HTML Element Attribute (Potential XSS)

You might also like