You are viewing a single comment's thread.

view the rest of the comments →

star_boi ago

Noticed something else strange.... from their main site home page above.... when you click on 'locations' along top banner, a pop up 'Authentication Required' box appears asking for a username and password, with site name of cardintranet.com ... if you click on background box disappears and locations shown.... this is not presented as any log-in area only as 'locations'. I have not seen this type pop up before, any ideas?

bdiminishedminor7 ago

If you monitor the network traffic for this page (locations), you will notice that this link:

https://www.cardintranet.com/PublishingImages/SitePages/Home/CARD_regional_map2.png

generates the authentication pop-up. Basically, the page is trying to load an image, but it seems this image is located in a protected directory, that is password protected on server-level.

An image of the same name can be found via Google: https://image-store.slidesharecdn.com/ed0add75-bb6e-468e-a573-53cdac51463a-large.png

star_boi ago

why password protect a map? what does this mean?? If it is an employee or parent password area, why on the location and map pages? is this at all similar to the CPP protected area? can it be hacked??