GeneralInformation

Hostnames	avior.no www.avior.no cpanel74.proisp.no
Domains	avior.no proisp.no
Country	Norway
City	Oslo
Organization	PRO ISP AS
ISP	EMP SECURE AS
ASN	AS28824

WebTechnologies

Blogs

WordPress6.7.2

CMS

WordPress6.7.2

Databases

MySQL

Form builders

Contact Form 76.0.5

JavaScript libraries

jQuery

sidr5.12

jQuery Migrate3.4.1

imagesLoaded5.0.0

Photo galleries

Slider Revolution

Programming languages

PHP

SEO

Yoast SEO24.6

Widgets

Slider Revolution

WordPress plugins

Contact Form 76.0.5

Yoast SEO24.6

WordPress themes

HashThemes Total

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(2)

CVE-2024-25117

6.8php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't contain a PHAR url, which might leads to RCE on PHP < 8.0, and doesn't validate if external references are allowed. This might leads to bypass of restrictions or RCE on projects that are using it, if they do not strictly revalidate the fontName that is passed by php-svg-lib. The `Style::fromAttributes(`), or the `Style::parseCssStyle()` should check the content of the `font-family` and prevents it to use a PHAR url, to avoid passing an invalid and dangerous `fontName` value to other libraries. The same check as done in the `Style::fromStyleSheets` might be reused. Libraries using this library as a dependency might be vulnerable to some bypass of restrictions, or even remote code execution, if they do not double check the value of the `fontName` that is passed by php-svg-lib. Version 0.5.2 contains a fix for this issue.

CVE-2024-5458

5.3In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.

2022(1)

CVE-2022-4900

6.2A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

2013(1)

CVE-2013-2220

7.5Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.

2007(1)

CVE-2007-3205

5.0The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts

443 2077 2095

443 / tcp

1793651950 | 2025-03-16T12:47:28.148152

Hashes

hash

563514573

http.dom_hash

819245172

http.favicon.hash

-689199093

http.html_hash

1793651950

http.robots_hash

-1938010093

http.server_hash

869690771

http.title_hash

-1122025250

Avior Group

HTTP/1.1 200 OK
Date: Sun, 16 Mar 2025 12:47:25 GMT
Server: Apache
X-Powered-By: PHP/7.4.33
Link: <https://www.avior.no/wp-json/>; rel="https://api.w.org/", <https://www.avior.no/wp-json/wp/v2/pages/839>; rel="alternate"; title="JSON"; type="application/json", <https://www.avior.no/>; rel=shortlink
Upgrade: h2,h2c
Connection: Upgrade
Vary: Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=15768000
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:02:a2:92:14:c7:4f:2e:bb:f6:23:24:73:7d:88:8b:54:19
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Feb 20 03:01:13 2025 GMT
            Not After : May 21 03:01:12 2025 GMT
        Subject: CN=www.avior.no
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:b5:f1:a1:15:b0:e5:59:7c:a4:92:b9:99:
                    43:c2:b7:40:8c:df:6a:05:ad:42:24:47:c0:4a:01:
                    05:78:2a:3d:f9:66:01:7f:a0:3d:d5:d3:e4:bd:9c:
                    86:b0:b2:c6:66:d7:e6:4d:52:23:d7:c9:83:ae:72:
                    01:64:73:f3:b8:6d:e6:11:30:6f:27:98:6b:e3:c3:
                    a1:6a:2d:3a:78:14:80:cc:14:49:a4:9b:7d:45:2f:
                    36:2b:fd:18:20:12:9d:73:a6:a4:e0:6d:d4:8c:77:
                    77:24:b1:86:a9:8a:90:1a:a9:a6:84:24:97:81:aa:
                    53:af:73:46:60:af:b1:7b:79:d0:9e:a6:2a:73:1b:
                    7e:79:b7:60:f3:b1:09:cc:3d:f2:d0:ff:4c:78:56:
                    5b:78:f1:39:c8:6a:e7:c8:51:64:8c:97:9c:f4:cf:
                    03:49:9e:9b:41:58:1b:41:61:50:1e:ec:c2:32:91:
                    7e:ea:0d:b7:96:39:96:7e:bb:79:51:7b:5a:c0:3f:
                    24:5f:b7:22:08:79:44:d1:98:e5:6a:59:11:9c:70:
                    30:3d:c8:51:12:28:f9:b5:c4:ca:d1:c9:78:ab:e4:
                    6b:e8:eb:51:c2:fe:3a:b3:3b:ea:33:01:18:42:b2:
                    11:09:74:b6:89:9b:2e:e9:29:3a:41:e8:29:c8:a4:
                    a0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                EE:51:24:C1:65:46:B6:63:30:E0:38:76:43:B9:AE:B3:3B:15:76:27
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:avior.no, DNS:www.avior.no
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb 20 03:59:44.175 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:09:5A:22:2F:D7:E0:A2:7B:8D:63:6B:9E:
                                19:3C:65:20:91:55:11:32:CD:84:08:E6:BA:44:45:18:
                                12:7D:D5:19:02:21:00:E3:C8:8F:3D:1E:AD:87:EE:4B:
                                BE:7F:03:58:9D:D2:00:81:60:A6:AE:B1:64:4A:B8:87:
                                0C:36:F5:8E:BC:57:74
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Feb 20 03:59:44.175 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:DA:2E:96:EC:1B:51:94:22:A2:67:EE:
                                EA:D7:03:AA:27:C5:9A:7F:4E:E0:E4:12:49:BD:A8:EA:
                                96:6C:B5:F7:07:02:20:1A:1F:3A:FF:39:6E:80:0C:1A:
                                C2:8A:6E:00:89:3C:61:3F:F0:2D:48:24:A8:13:D0:9C:
                                98:2D:41:5F:EE:00:7B
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        35:a1:e2:0e:79:67:d5:ed:33:3f:e0:cf:55:ec:ee:82:1e:d1:
        37:cc:b1:e4:cc:49:e2:a9:9c:5f:65:75:1c:f7:ab:3c:a9:cc:
        52:ef:a6:8c:98:d5:67:5a:d8:31:ac:4f:13:eb:de:fd:94:8a:
        70:02:d2:b5:15:38:b8:e3:d7:3b:6f:7a:d9:0f:5c:cf:e0:21:
        4a:57:e0:84:c8:30:df:db:46:82:5a:3c:cb:fb:34:39:a8:4c:
        ac:04:09:4a:5e:5e:90:a4:23:f6:86:56:df:f7:bb:fd:b8:1e:
        90:6d:ec:4f:3e:b3:e1:84:76:9b:ea:b3:0c:69:01:14:d5:80:
        d4:83:77:28:f7:1e:7a:ff:68:c3:a6:ef:1c:47:62:73:f9:fe:
        eb:58:bd:07:3d:3b:ef:39:d9:1c:42:4f:6b:35:2a:4f:61:d1:
        07:6a:ea:16:a2:44:20:9c:d4:ea:82:12:f4:d0:c4:1a:7e:ed:
        05:cf:3e:e7:f6:2e:30:6f:0c:44:22:7b:98:a8:99:0c:4b:a1:
        58:83:68:84:2c:0d:fd:4d:93:30:18:11:0f:29:dc:85:3a:4b:
        87:f9:56:cb:48:82:da:a7:29:3d:7e:25:24:dd:8d:38:20:34:
        bb:bc:60:2d:db:80:14:ca:cc:3e:be:a9:f8:7f:75:92:dd:a6:
        a8:94:2f:16

Vulnerabilities

1 4

2077 / tcp

-1922445364 | 2025-03-18T08:46:15.707217

Hashes

hash

102535114

http.dom_hash

-2006505642

http.html_hash

-1922445364

http.server_hash

-184643217

HTTP/1.1 401 Unauthorized
Date: Tue, 18 Mar 2025 08:46:15 GMT
Server: cPanel
Persistent-Auth: false
Host: 46.250.221.16:2077
Cache-Control: no-cache, no-store, must-revalidate, private
Connection: close
Vary: Accept-Encoding
WWW-Authenticate: Basic realm="Restricted Area"
Content-Length: 35
Content-Type: text/html; charset="utf-8"
Expires: Fri, 01 Jan 1990 00:00:00 GMT

2095 / tcp

1849895577 | 2025-03-10T18:48:46.005347

Hashes

hash

1231681632

http.dom_hash

610378472

http.favicon.hash

-696182543

http.html_hash

1849895577

http.title_hash

-1657125146

Webmail Login

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset="utf-8"
Date: Mon, 10 Mar 2025 18:48:45 GMT
Cache-Control: no-cache, no-store, must-revalidate, private
Pragma: no-cache
Set-Cookie: webmailrelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: webmailsession=%3ajtH_7vOi71WGZbfl%2cdf1627a34ce50f6438d147fc98b4b195; HttpOnly; path=/; port=2095
Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=46.250.221.16; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: roundcube_cookies=enabled; HttpOnly; expires=Tue, 10-Mar-2026 18:48:45 GMT; path=/; port=2095
Content-Length: 37561

46.250.221.16

Last Seen: 2025-03-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

443 / tcp

1793651950 | 2025-03-16T12:47:28.148152

Hashes

Apache httpd

2077 / tcp

-1922445364 | 2025-03-18T08:46:15.707217

Hashes

2095 / tcp

1849895577 | 2025-03-10T18:48:46.005347

Hashes

Products

Pricing

Contact Us

46.250.221.16

Last Seen: 2025-03-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

443 / tcp 1793651950 | 2025-03-16T12:47:28.148152

Hashes

Apache httpd

2077 / tcp -1922445364 | 2025-03-18T08:46:15.707217

Hashes

2095 / tcp 1849895577 | 2025-03-10T18:48:46.005347

Hashes

Products

Pricing

Contact Us

Vulnerabilities

443 / tcp

1793651950 | 2025-03-16T12:47:28.148152

2077 / tcp

-1922445364 | 2025-03-18T08:46:15.707217

2095 / tcp

1849895577 | 2025-03-10T18:48:46.005347