HEX

File: D:/hMailServer/Data/itpartnership.com/surinder/D0/{D09F1235-04E8-4DFB-96FD-59C4A8E39E9F}.eml
Date: Mon, 27 Jul 2026 14:51:42 +0000 (GMT)
From: Support General <support@securitymetrics.com>
Sender: noreply@salesforce.com
To: "paul@castironradiatorcentre.co.uk" <paul@castironradiatorcentre.co.uk>
Cc: "surinder@itpartnership.com" <surinder@itpartnership.com>
Message-ID: <30M-j000000000000000000000000000000000000000000000TIU9A500ObD3SYgvTAu-IqEOfGDcnA@sfdc.net>
In-Reply-To: <CWLP123MB5865729D0216B864AE957F20E2CC2@CWLP123MB5865.GBRP123.PROD.OUTLOOK.COM>
References: <4916d619d26c4b66822d2405bc5c9cdb@securitymetrics.com>
 <CWLP123MB5865729D0216B864AE957F20E2CC2@CWLP123MB5865.GBRP123.PROD.OUTLOOK.COM>
Subject: RE: FW: PCI Scan Failed [www.vintagedoorknobs.co.uk]
MIME-Version: 1.0
Content-Type: multipart/mixed; 
	boundary="----=_Part_2058_107430949.1785163902127"
X-mail_abuse_inquiries: https://www.salesforce.com/company/legal/abuse
X-SFDC-ORGTYPE: ACTIVE
X-SFDC-TLS-NoRelay: 1
X-SFDC-CORRELATION-ID: 00024d4gmj9qqdha
X-SFDC-Binding: 1WrIRBV94myi25uB
X-SFDC-App: coreapp
X-SFDC-Pod-Cell: usa474
X-SFDC-EmailCategory: quickActionEmail
X-SFDC-EntityId: 500Rm00001WDau2
X-SFDC-Interface: internal

------=_Part_2058_107430949.1785163902127
Content-Type: multipart/alternative; 
	boundary="----=_Part_2057_1284139422.1785163902127"

------=_Part_2057_1284139422.1785163902127
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hello,


Thank you for contacting SecurityMetrics!


I can definitely assist you with getting in contact with a scan technician =
so you can get that false positive submitted. I will get you transferred to=
 the scan tech department. But before I can do that I need you to verify yo=
ur...


Company name, address, city, state, and zip code


I'll also need you to verify your merchant ID. If you are unable to locate =
it you can locate it by signing onto www.securitymetrics.com


At the top click "Account", click "Settings", and then scroll down to the b=
ottom you'll be able to locate your merchant ID right there.


I will also need you to confirm the scan targets (IPs/or Domains)


How to locate your scan target(s):

Sign onto "www.securitymetrics.com" with your log-in credentials.

Click "Menu" on the top-left corner. Then click "Vulnerability scanning"

Right there will provide the target.



If you have any further questions please don't hesitate to reach back out t=
o me.




Rachel Galaz
Support Representative
US: 801-705-5700 UK: 0203-014-7825
SecurityMetrics.com





--------------- Original Message ---------------
From: Paul Brown [paul@castironradiatorcentre.co.uk]
Sent: 7/27/2026, 7:52 AM
To: support@securitymetrics.com
Cc: surinder@itpartnership.com
Subject: FW: PCI Scan Failed [www.vintagedoorknobs.co.uk]

Hi,


Following the below failure of our vulnerability scan my developer (Surinde=
r Singh of IT Partnership) has requested that I send you the following.


We have investigated and reproduced the reported CGI Generic Path Traversal=
 (write test) finding affecting:

https://www.vintagedoorknobs.co.uk/products.asp


The report identifies:

the sortby parameter using GET; and
the xcode parameter using POST.


Our investigation indicates that this is a false positive.


GET sortby parameter

The application does not place the submitted sortby value directly into SQL=
 or use it as a file path.


The value is processed through a strict whitelist. Only the following known=
 values are recognised:

2 =96 price, high to low
3 =96 price, low to high
4 =96 product name


Each recognised value is mapped internally to a predefined SQL ORDER BY exp=
ression. Any other value results in no custom sort expression being used.


We reproduced the scanner test by comparing:


sortby=3Dnot-a-valid-sort-value

with:

sortby=3D../../../../../../../../../../windows/system32/config/sam


Both requests were made using the same ASP session.


The results were:

HTTP status: 200 OK for both
Content length: 63640 bytes for both
HTML response: byte-for-byte identical
File comparison result: FC: no differences encountered


The only response-header differences were the expected Date and Expires tim=
estamps.


POST xcode parameter


The SecurityMetrics request submitted an xcode value while leaving the asso=
ciated xcmd command blank.


In the application code, when xcmd is blank, the submitted xcode value is d=
iscarded and replaced by the separate code parameter. As the scanner also s=
upplied a blank code value, the resulting command and product code are both=
 blank and the basket-operation routine exits without processing the submit=
ted xcode.


We reproduced this by comparing an ordinary invalid product code with the r=
eported traversal value, again using the same ASP session and leaving xcmd,=
 cmd and code blank.


The results were:

HTTP status: 200 OK for both
Content length: 63708 bytes for both
HTML responses: identical apart from a dynamic page-execution timing commen=
t
Baseline timing comment: 0.063 secs
Traversal timing comment: 0.043 secs


The response headers again differed only in their normal Date and Expires t=
imestamps.


The changing execution-time comment is expected dynamic content and does no=
t indicate file access. The scan evidence also shows similar minor executio=
n-time differences, without demonstrating any file access or modification.


Code review


Neither sortby nor xcode is passed to any:

filesystem function;
path-mapping function;
file stream;
dynamic include;
operating-system command; or
executable process.


There are no relevant calls to functions such as Server.MapPath, FileSystem=
Object, ADODB.Stream, Server.Execute, Response.WriteFile or WScript.Shell.


In legitimate use, xcode represents either a product code or a currency cod=
e. Product codes are used only in database lookups with SQL escaping and pr=
oduct-existence validation. Currency codes must match an allowed currency l=
ist or a record in the currencies table.


No file contents were disclosed, no file was modified, no filesystem error =
occurred, and the traversal value was not reflected in the response.


We also inspected the target file identified by the scanner. The Windows SA=
M file at C:\Windows\System32\config\SAM has a last-modified timestamp of 6=
 May 2026 at 04:11. The SecurityMetrics scan was performed on 24 July 2026 =
between 15:05 and 16:28. The file was therefore not modified during or as a=
 result of the scan.


We therefore believe the reported CGI Generic Path Traversal (write test) v=
ulnerability is a false positive. Please could this finding be reviewed man=
ually and marked as a false positive?


We can provide the response files, comparison results and relevant source-c=
ode extracts if required


Please can you reply accordingly.



Regards,


Paul Brown.



Cast Iron Radiator Centre (A Division of Mossmead Ltd)

241 Torrington Avenue

(Corner of Padstow Road)

Coventry

CV4 9AP


what3words
this.energy.bench


Tel: 024 76 303999

email: paul@castironradiatorcentre.co.uk

WEBSITE: Cast Iron Radiator Centre


Opening Hrs: Mon - Fri: 8am - 5pm

Telephone lines open: Mon =96 Fri: 9am =96 4.30PM

Sat, Sun & Bank Hols: Closed


CONFIDENTIALITY NOTICE: This email and any attachments are confidential and=
 intended solely for the use of the individual or entity to whom they are a=
ddressed. If you have received this email in error, please notify the sende=
r immediately and delete it from your system. You must not disclose, copy, =
or distribute any part of this email if you are not the intended recipient.


DISCLAIMER: The views and opinions expressed in this email are those of the=
 author and do not necessarily represent the views of our company. The info=
rmation contained in this email is for general information purposes only. W=
hile we endeavour to keep the information up to date and correct, we make n=
o representations or warranties of any kind, express or implied, about the =
completeness, accuracy, reliability, suitability, or availability with resp=
ect to the email or the information, products, services, or related graphic=
s contained in the email for any purpose. Any reliance you place on such in=
formation is therefore strictly at your own risk.


VIRUS WARNING: Although we have taken reasonable precautions to ensure no v=
iruses are present in this email, we cannot accept responsibility for any l=
oss or damage arising from the use of this email or attachments. It is your=
 responsibility to ensure that your computer systems are adequately protect=
ed from viruses and other harmful code.


LEGAL NOTICE: This email does not constitute legal advice and is not intend=
ed to establish any attorney-client relationship. You should seek appropria=
te legal advice before taking or refraining from any action based on the co=
ntents of this email.


COMPLIANCE WITH REGULATIONS: Our company operates in accordance with releva=
nt data protection regulations. If you have any concerns about how your per=
sonal data is being processed, please contact our company using the above d=
etails.




From: SecurityMetrics Support Team <noreply@securitymetrics.com>
Sent: 24 July 2026 23:28
To: Paul Brown (CIRC) <paul@castironradiatorcentre.co.uk>
Cc: Paul Brown (CIRC) <paul@castironradiatorcentre.co.uk>
Subject: PCI Scan Failed [www.vintagedoorknobs.co.uk]








Hello Paul,

Your ASV Vulnerability Scan has failed for the following PCI Site Certifica=
tion:

Target: www.vintagedoorknobs.co.uk SCID: 1972636

Your scan 13766852 failed to pass because one or more failing vulnerabiliti=
es were found. To view and resolve your failing vulnerabilities please log =
into your SecurityMetrics account.

Click here to log into your account

If you have any questions or concerns, please contact our 24/7 Technical Su=
pport team. You can email or call us at:

Email: support@securitymetrics.com
Phone: 801.705.5700 (USA)
Phone: 877.705.6070 (Canada)
Phone: 0203.014.7825 (UK)

Sincerely,

SecurityMetrics
Technical Support
www.securitymetrics.com

This is a service message from SecurityMetrics, Inc., 1275 West 1600 North,=
 Orem, UT 84057.
------=_Part_2057_1284139422.1785163902127
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<html><div>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; text-decoration-line: none; vertical-align: baseline; white-spa=
ce: pre-wrap;">Hello,&nbsp;</span></p>
<br>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; text-decoration-line: none; vertical-align: baseline; white-spa=
ce: pre-wrap;">Thank you for contacting </span><span style=3D"font-size: 11=
pt; font-family: 'Google Sans Text'; color: #000000; font-weight: bold; tex=
t-decoration-line: none; vertical-align: baseline; white-space: pre-wrap;">=
SecurityMetrics</span><span style=3D"font-size: 11pt; font-family: 'Google =
Sans Text'; color: #000000; text-decoration-line: none; vertical-align: bas=
eline; white-space: pre-wrap;">!</span></p>
<br>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; text-decoration-line: none; vertical-align: baseline; white-spa=
ce: pre-wrap;">I can definitely assist you with getting in contact with a s=
can technician so you can get that false positive submitted. I will get you=
 transferred to the scan tech department. But before I can do that I need y=
ou to verify your...</span></p>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; text-decoration-line: none; vertical-align: baseline; white-spa=
ce: pre-wrap;">&nbsp;</span></p>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; font-style: italic; text-decoration-line: none; vertical-align:=
 baseline; white-space: pre-wrap;">Company name, address, city, state, and =
zip code</span></p>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; text-decoration-line: none; vertical-align: baseline; white-spa=
ce: pre-wrap;">&nbsp;</span></p>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; text-decoration-line: none; vertical-align: baseline; white-spa=
ce: pre-wrap;">I'll also need you to verify your </span><span style=3D"font=
-size: 11pt; font-family: 'Google Sans Text'; color: #000000; font-weight: =
bold; font-style: italic; text-decoration-line: none; vertical-align: basel=
ine; white-space: pre-wrap;">merchant ID</span><span style=3D"font-size: 11=
pt; font-family: 'Google Sans Text'; color: #000000; text-decoration-line: =
none; vertical-align: baseline; white-space: pre-wrap;">. If you are unable=
 to locate it you can locate it by signing onto </span><a href=3D"http://ww=
w.securitymetrics.com/" target=3D"_blank" rel=3D"noopener noreferrer"><span=
 style=3D"font-size: 11pt; font-family: 'Google Sans Text'; color: #000000;=
 text-decoration-line: underline; text-decoration-skip-ink: none; vertical-=
align: baseline; white-space: pre-wrap;">www.securitymetrics.com</span></a>=
<span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; color: #00=
0000; text-decoration-line: none; vertical-align: baseline; white-space: pr=
e-wrap;">&nbsp;</span></p>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; text-decoration-line: none; vertical-align: baseline; white-spa=
ce: pre-wrap;">&nbsp;</span></p>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; text-decoration-line: none; vertical-align: baseline; white-spa=
ce: pre-wrap;">At the top click "</span><span style=3D"font-size: 11pt; fon=
t-family: 'Google Sans Text'; color: #000000; font-style: italic; text-deco=
ration-line: none; vertical-align: baseline; white-space: pre-wrap;">Accoun=
t</span><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; co=
lor: #000000; text-decoration-line: none; vertical-align: baseline; white-s=
pace: pre-wrap;">", click "</span><span style=3D"font-size: 11pt; font-fami=
ly: 'Google Sans Text'; color: #000000; font-style: italic; text-decoration=
-line: none; vertical-align: baseline; white-space: pre-wrap;">Settings</sp=
an><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; color: =
#000000; text-decoration-line: none; vertical-align: baseline; white-space:=
 pre-wrap;">", and then scroll down to the bottom you'll be able to locate =
your </span><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'=
; color: #000000; font-weight: bold; font-style: italic; text-decoration-li=
ne: none; vertical-align: baseline; white-space: pre-wrap;">merchant ID</sp=
an><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; color: =
#000000; text-decoration-line: none; vertical-align: baseline; white-space:=
 pre-wrap;"> right there.&nbsp;</span></p>
<br>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; text-decoration-line: none; vertical-align: baseline; white-spa=
ce: pre-wrap;">I will also need you to confirm the scan targets (IPs/</span=
><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; color: #0=
00000; font-weight: bold; text-decoration-line: underline; text-decoration-=
skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">or</span>=
<span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; color: #00=
0000; text-decoration-line: none; vertical-align: baseline; white-space: pr=
e-wrap;"> Domains)</span></p>
<br>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; text-decoration-line: underline; text-decoration-skip-ink: none=
; vertical-align: baseline; white-space: pre-wrap;">How to locate your scan=
 target(s):</span></p>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; text-decoration-line: none; vertical-align: baseline; white-spa=
ce: pre-wrap;">Sign onto "</span><a href=3D"http://www.securitymetrics.com/=
" target=3D"_blank" rel=3D"noopener noreferrer"><span style=3D"font-size: 1=
1pt; font-family: 'Google Sans Text'; color: #000000; font-style: italic; t=
ext-decoration-line: none; vertical-align: baseline; white-space: pre-wrap;=
">www.securitymetrics.com</span></a><span style=3D"font-size: 11pt; font-fa=
mily: 'Google Sans Text'; color: #000000; text-decoration-line: none; verti=
cal-align: baseline; white-space: pre-wrap;">" with your log-in credentials=
.</span></p>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; text-decoration-line: none; vertical-align: baseline; white-spa=
ce: pre-wrap;">Click "</span><span style=3D"font-size: 11pt; font-family: '=
Google Sans Text'; color: #000000; font-style: italic; text-decoration-line=
: none; vertical-align: baseline; white-space: pre-wrap;">Menu</span><span =
style=3D"font-size: 11pt; font-family: 'Google Sans Text'; color: #000000; =
text-decoration-line: none; vertical-align: baseline; white-space: pre-wrap=
;">" on the top-left corner. Then click "</span><span style=3D"font-size: 1=
1pt; font-family: 'Google Sans Text'; color: #000000; font-style: italic; t=
ext-decoration-line: none; vertical-align: baseline; white-space: pre-wrap;=
">Vulnerability scanning</span><span style=3D"font-size: 11pt; font-family:=
 'Google Sans Text'; color: #000000; text-decoration-line: none; vertical-a=
lign: baseline; white-space: pre-wrap;">"</span></p>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; text-decoration-line: none; vertical-align: baseline; white-spa=
ce: pre-wrap;">Right there will provide the target.</span></p>
<br><br>
<p dir=3D"ltr" style=3D"line-height: 1.38; margin-top: 0pt; margin-bottom: =
0pt;"><span style=3D"font-size: 11pt; font-family: 'Google Sans Text'; colo=
r: #000000; text-decoration-line: none; vertical-align: baseline; white-spa=
ce: pre-wrap;">If you have any further questions please don't hesitate to r=
each back out to me.</span></p>
<br><br><br></div>
<div>
<table cellpadding=3D"0" cellspacing=3D"0" border=3D"0">
<tbody>
<tr>
<td style=3D"padding-right: 20px; vertical-align: middle; border-right: 2px=
 solid #eeeeee;"><a href=3D"https://www.securitymetrics.com" target=3D"_bla=
nk" rel=3D"noopener noreferrer"><img src=3D"https://cdn.prod.website-files.=
com/672118d386a0ee61ef1d8ee1/68dd376bca2e8f2381d6b4c0_email-signature-symbo=
l-securitymetrics.png" alt=3D"SecurityMetrics Symbol" width=3D"50" style=3D=
"display: block; border: 0;"></a></td>
<td style=3D"padding-left: 20px; vertical-align: middle;">
<div style=3D"text-align: start;"><span style=3D"font-family: 'Roboto', Ari=
al, sans-serif; font-size: 10pt; color: #333333; line-height: 1.6;"><strong=
 style=3D"font-size: 11pt; color: #000000; font-weight: bold;">Rachel Galaz=
</strong><br><span style=3D"color: #555555;">Support Representative</span><=
br><a><span style=3D"color: #333333; text-decoration: none;">US: 801-705-57=
00 UK: 0203-014-7825</span></a><br><a href=3D"https://SecurityMetrics.com" =
style=3D"text-decoration: none;"><span style=3D"color: #1670ea; text-decora=
tion: none;">SecurityMetrics.com</span></a></span></div>
</td>
</tr>
</tbody>
</table>
</div>
<div>&nbsp;</div>
<div>&nbsp;</div>
<div>&nbsp;</div>
<div>--------------- Original Message ---------------<br clear=3D"none"><b>=
From:</b> Paul Brown [paul@castironradiatorcentre.co.uk]<br clear=3D"none">=
<b>Sent:</b> 7/27/2026, 7:52 AM<br clear=3D"none"><b>To:</b> support@securi=
tymetrics.com<br clear=3D"none"><b>Cc:</b> surinder@itpartnership.com<br cl=
ear=3D"none"><b>Subject:</b> FW: PCI Scan Failed [www.vintagedoorknobs.co.u=
k]<br clear=3D"none"><br clear=3D"none"></div>
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language: EN-US;">Hi,</sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language: EN-US;">&nbsp;<=
/span></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language: EN-US;">Followi=
ng the below failure of our vulnerability scan my developer (Surinder Singh=
 of IT Partnership) has requested that I send you the following.</span></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language: EN-US;">&nbsp;<=
/span></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">We have investigated and reproduced the reported <b>CGI Generic P=
ath Traversal (write test)</b> finding affecting:</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;"><a shape=3D"rect" href=3D"https://www.vintagedoorknobs.co.uk/prod=
ucts.asp" target=3D"_blank" rel=3D"noopener noreferrer"><span style=3D"colo=
r: #467886;">https://www.vintagedoorknobs.co.uk/products.asp</span></a></sp=
an></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">The report identifies:</span></i></p>
<ul style=3D"margin-top: 0cm;">
<li class=3D"MsoNormal" style=3D"mso-list: l1 level1 lfo1;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">the sortby parameter using =
GET; and </span></i></li>
<li class=3D"MsoNormal" style=3D"mso-list: l1 level1 lfo1;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">the xcode parameter using P=
OST. </span></i></li>
</ul>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">Our investigation indicates that this is a false positive.</span>=
</i></p>
<p class=3D"MsoNormal"><b><i><span style=3D"font-size: 11.0pt; font-family:=
 'Calibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-langu=
age: EN-US;">&nbsp;</span></i></b></p>
<p class=3D"MsoNormal"><b><i><span style=3D"font-size: 11.0pt; font-family:=
 'Calibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-langu=
age: EN-US;">GET sortby parameter</span></i></b></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">The application does not place the submitted sortby value directl=
y into SQL or use it as a file path.</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">The value is processed through a strict whitelist. Only the follo=
wing known values are recognised:</span></i></p>
<ul style=3D"margin-top: 0cm;">
<li class=3D"MsoNormal" style=3D"mso-list: l2 level1 lfo2;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">2 &ndash; price, high to lo=
w </span></i></li>
<li class=3D"MsoNormal" style=3D"mso-list: l2 level1 lfo2;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">3 &ndash; price, low to hig=
h </span></i></li>
<li class=3D"MsoNormal" style=3D"mso-list: l2 level1 lfo2;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">4 &ndash; product name </sp=
an></i></li>
</ul>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">Each recognised value is mapped internally to a predefined SQL OR=
DER BY expression. Any other value results in no custom sort expression bei=
ng used.</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">We reproduced the scanner test by comparing:</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">sortby=3Dnot-a-valid-sort-value</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">with:</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">sortby=3D../../../../../../../../../../windows/system32/config/sa=
m</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">Both requests were made using the same ASP session.</span></i></p=
>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">The results were:</span></i></p>
<ul style=3D"margin-top: 0cm;">
<li class=3D"MsoNormal" style=3D"mso-list: l3 level1 lfo3;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">HTTP status: 200 OK for bot=
h </span></i></li>
<li class=3D"MsoNormal" style=3D"mso-list: l3 level1 lfo3;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">Content length: 63640 bytes=
 for both </span></i></li>
<li class=3D"MsoNormal" style=3D"mso-list: l3 level1 lfo3;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">HTML response: byte-for-byt=
e identical </span></i></li>
<li class=3D"MsoNormal" style=3D"mso-list: l3 level1 lfo3;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">File comparison result: FC:=
 no differences encountered </span></i></li>
</ul>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">The only response-header differences were the expected Date and E=
xpires timestamps.</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><b><i><span style=3D"font-size: 11.0pt; font-family:=
 'Calibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-langu=
age: EN-US;">POST xcode parameter</span></i></b></p>
<p class=3D"MsoNormal"><b><i><span style=3D"font-size: 11.0pt; font-family:=
 'Calibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-langu=
age: EN-US;">&nbsp;</span></i></b></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">The SecurityMetrics request submitted an xcode value while leavin=
g the associated xcmd command blank.</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">In the application code, when xcmd is blank, the submitted xcode =
value is discarded and replaced by the separate code parameter. As the scan=
ner also supplied a blank code value, the resulting command and product cod=
e are both blank and the basket-operation routine exits without processing =
the submitted xcode.</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">We reproduced this by comparing an ordinary invalid product code =
with the reported traversal value, again using the same ASP session and lea=
ving xcmd, cmd and code blank.</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">The results were:</span></i></p>
<ul style=3D"margin-top: 0cm;">
<li class=3D"MsoNormal" style=3D"mso-list: l0 level1 lfo4;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">HTTP status: 200 OK for bot=
h </span></i></li>
<li class=3D"MsoNormal" style=3D"mso-list: l0 level1 lfo4;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">Content length: 63708 bytes=
 for both </span></i></li>
<li class=3D"MsoNormal" style=3D"mso-list: l0 level1 lfo4;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">HTML responses: identical a=
part from a dynamic page-execution timing comment </span></i></li>
<li class=3D"MsoNormal" style=3D"mso-list: l0 level1 lfo4;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">Baseline timing comment: 0.=
063 secs </span></i></li>
<li class=3D"MsoNormal" style=3D"mso-list: l0 level1 lfo4;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">Traversal timing comment: 0=
.043 secs </span></i></li>
</ul>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">The response headers again differed only in their normal Date and=
 Expires timestamps.</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">The changing execution-time comment is expected dynamic content a=
nd does not indicate file access. The scan evidence also shows similar mino=
r execution-time differences, without demonstrating any file access or modi=
fication.</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><b><i><span style=3D"font-size: 11.0pt; font-family:=
 'Calibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-langu=
age: EN-US;">Code review</span></i></b></p>
<p class=3D"MsoNormal"><b><i><span style=3D"font-size: 11.0pt; font-family:=
 'Calibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-langu=
age: EN-US;">&nbsp;</span></i></b></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">Neither sortby nor xcode is passed to any:</span></i></p>
<ul style=3D"margin-top: 0cm;">
<li class=3D"MsoNormal" style=3D"mso-list: l4 level1 lfo5;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">filesystem function; </span=
></i></li>
<li class=3D"MsoNormal" style=3D"mso-list: l4 level1 lfo5;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">path-mapping function; </sp=
an></i></li>
<li class=3D"MsoNormal" style=3D"mso-list: l4 level1 lfo5;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">file stream; </span></i></l=
i>
<li class=3D"MsoNormal" style=3D"mso-list: l4 level1 lfo5;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">dynamic include; </span></i=
></li>
<li class=3D"MsoNormal" style=3D"mso-list: l4 level1 lfo5;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">operating-system command; o=
r </span></i></li>
<li class=3D"MsoNormal" style=3D"mso-list: l4 level1 lfo5;"><i><span style=
=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif; mso-ligatures: st=
andardcontextual; mso-fareast-language: EN-US;">executable process. </span>=
</i></li>
</ul>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">There are no relevant calls to functions such as Server.MapPath, =
FileSystemObject, ADODB.Stream, Server.Execute, Response.WriteFile or WScri=
pt.Shell.</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">In legitimate use, xcode represents either a product code or a cu=
rrency code. Product codes are used only in database lookups with SQL escap=
ing and product-existence validation. Currency codes must match an allowed =
currency list or a record in the currencies table.</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">No file contents were disclosed, no file was modified, no filesys=
tem error occurred, and the traversal value was not reflected in the respon=
se.</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">We also inspected the target file identified by the scanner. The =
Windows SAM file at C:\Windows\System32\config\SAM has a last-modified time=
stamp of 6 May 2026 at 04:11. The SecurityMetrics scan was performed on 24 =
July 2026 between 15:05 and 16:28. The file was therefore not modified duri=
ng or as a result of the scan.</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">We therefore believe the reported <b>CGI Generic Path Traversal (=
write test)</b> vulnerability is a false positive. Please could this findin=
g be reviewed manually and marked as a false positive?</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">&nbsp;</span></i></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; font-family: 'C=
alibri',sans-serif; mso-ligatures: standardcontextual; mso-fareast-language=
: EN-US;">We can provide the response files, comparison results and relevan=
t source-code extracts if required</span></i><i><span style=3D"mso-fareast-=
language: EN-US;"></span></i></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language: EN-US;">&nbsp;<=
/span></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language: EN-US;">Please =
can you reply accordingly.</span></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language: EN-US;">&nbsp;<=
/span></p>
<p class=3D"MsoNormal">&nbsp;</p>
<p class=3D"MsoNormal"><span style=3D"font-size: 11.0pt; color: black;">Reg=
ards,</span><span style=3D"font-size: 11.0pt; color: black;"></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size: 11.0pt; color: black;">&nb=
sp;</span><span style=3D"font-size: 11.0pt; color: black;"></span></p>
<p class=3D"MsoNormal"><b><i><span style=3D"color: black;">Paul Brown.</spa=
n></i></b><span style=3D"color: black;"></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size: 11.0pt; color: black;">&nb=
sp;</span><span style=3D"font-size: 11.0pt; color: black;"></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size: 11.0pt; color: black;"><im=
g id=3D"Picture_x0020_1682194979" border=3D"0" width=3D"172" height=3D"59" =
style=3D"width: 1.7916in; height: .6166in;" src=3D"cid:33791714-3e30-42a9-b=
470-e4a554b05637@Image_0_" alt=3D"CIRC Logo - Copy"></span></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
Cast Iron Radiator Centre (A Division of Mossmead Ltd)</span></i><span styl=
e=3D"font-size: 11.0pt; color: black;"></span></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
241 Torrington Avenue</span></i><span style=3D"font-size: 11.0pt; color: bl=
ack;"></span></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
(Corner of Padstow Road)</span></i><span style=3D"font-size: 11.0pt; color:=
 black;"></span></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
Coventry</span></i><span style=3D"font-size: 11.0pt; color: black;"></span>=
</p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
CV4 9AP</span></i><span style=3D"font-size: 11.0pt; color: black;"></span><=
/p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
&nbsp;</span></i><span style=3D"font-size: 11.0pt; color: black;"></span></=
p>
<p class=3D"MsoNormal"><b><i><span style=3D"font-size: 11.0pt; color: black=
;">what3words</span></i></b><i><span style=3D"font-size: 11.0pt; color: bla=
ck;"><br clear=3D"none"></span></i><i><u><span style=3D"font-size: 11.0pt; =
color: blue;"><a shape=3D"rect" href=3D"https://w3w.co/this.energy.bench" t=
arget=3D"_blank" title=3D"https://w3w.co/this.energy.bench" rel=3D"noopener=
 noreferrer">this.energy.bench</a></span></u></i><span style=3D"font-size: =
11.0pt; color: black;"></span></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
&nbsp;</span></i><span style=3D"font-size: 11.0pt; color: black;"></span></=
p>
<p class=3D"MsoNormal"><b><i><span style=3D"font-size: 11.0pt; color: black=
;">Tel:</span></i></b><i><span style=3D"font-size: 11.0pt; color: black;">&=
nbsp;024 76 303999</span></i><span style=3D"font-size: 11.0pt; color: black=
;"></span></p>
<p class=3D"MsoNormal"><b><i><span style=3D"font-size: 11.0pt; color: black=
;">email</span></i></b><i><span style=3D"font-size: 11.0pt; color: black;">=
:</span></i><i><span style=3D"font-size: 11.0pt; color: black;"> </span></i=
><i><u><span style=3D"font-size: 11.0pt; color: black;">paul@castironradiat=
orcentre.co.uk</span></u></i><i><span style=3D"font-size: 11.0pt; color: bl=
ack;">&nbsp;</span></i><i><span style=3D"font-size: 11.0pt; color: black;">=
 </span></i><i><span style=3D"font-size: 11.0pt; color: black;">&nbsp;</spa=
n></i><span style=3D"font-size: 11.0pt; color: black;"></span></p>
<p class=3D"MsoNormal"><b><i><span style=3D"font-size: 11.0pt; color: black=
;">WEBSITE</span></i></b><i><span style=3D"font-size: 11.0pt; color: black;=
">:</span></i><i><span style=3D"font-size: 11.0pt; color: black;"> </span><=
/i><b><i><u><span style=3D"font-size: 11.0pt; color: blue;"><a shape=3D"rec=
t" href=3D"http://www.castironradiatorcentre.co.uk/" target=3D"_blank" titl=
e=3D"http://www.castironradiatorcentre.co.uk/" rel=3D"noopener noreferrer">=
Cast Iron Radiator Centre</a></span></u></i></b><span style=3D"font-size: 1=
1.0pt; color: black;"></span></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
&nbsp;</span></i><span style=3D"font-size: 11.0pt; color: black;"></span></=
p>
<p class=3D"MsoNormal"><b><i><span style=3D"font-size: 11.0pt; color: black=
;">Opening Hrs:</span></i></b><i><span style=3D"font-size: 11.0pt; color: b=
lack;">&nbsp;Mon - Fri: 8am - 5pm</span></i><span style=3D"font-size: 11.0p=
t; color: black;"></span></p>
<p class=3D"MsoNormal"><b><i><span style=3D"font-size: 11.0pt; color: black=
;">Telephone lines open:</span></i></b><i><span style=3D"font-size: 11.0pt;=
 color: black;">&nbsp;Mon &ndash; Fri: 9am &ndash; 4.30PM</span></i><span s=
tyle=3D"font-size: 11.0pt; color: black;"></span></p>
<p class=3D"MsoNormal"><b><i><span style=3D"font-size: 11.0pt; color: black=
;">Sat, Sun</span></i></b><b><i><span style=3D"font-size: 11.0pt; color: bl=
ack;"> </span></i></b><b><i><span style=3D"font-size: 11.0pt; color: black;=
">&amp;</span></i></b><b><i><span style=3D"font-size: 11.0pt; color: black;=
"> </span></i></b><b><i><span style=3D"font-size: 11.0pt; color: black;">Ba=
nk Hols: Closed</span></i></b><span style=3D"font-size: 11.0pt; color: blac=
k;"></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size: 11.0pt; color: black;">&nb=
sp;</span><span style=3D"font-size: 11.0pt; color: black;"></span></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
CONFIDENTIALITY NOTICE: This email and any attachments are confidential and=
 intended solely for the use of the individual or entity to whom they are a=
ddressed. If you have received this email in error, please notify the sende=
r immediately and delete it from your system. You must not disclose, copy, =
or distribute any part of this email if you are not the intended recipient.=
</span></i><span style=3D"font-size: 11.0pt; color: black;"></span></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
&nbsp;</span></i><span style=3D"font-size: 11.0pt; color: black;"></span></=
p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
DISCLAIMER: The views and opinions expressed in this email are those of the=
 author and do not necessarily represent the views of our company. The info=
rmation contained in this email is for general information purposes only. W=
hile we endeavour to keep the information up to date and correct, we make n=
o representations or warranties of any kind, express or implied, about the =
completeness, accuracy, reliability, suitability, or availability with resp=
ect to the email or the information, products, services, or related graphic=
s contained in the email for any purpose. Any reliance you place on such in=
formation is therefore strictly at your own risk.</span></i><span style=3D"=
font-size: 11.0pt; color: black;"></span></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
&nbsp;</span></i><span style=3D"font-size: 11.0pt; color: black;"></span></=
p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
VIRUS WARNING: Although we have taken reasonable precautions to ensure no v=
iruses are present in this email, we cannot accept responsibility for any l=
oss or damage arising from the use of this email or attachments. It is your=
 responsibility to ensure that your computer systems are adequately protect=
ed from viruses and other harmful code.</span></i><span style=3D"font-size:=
 11.0pt; color: black;"></span></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
&nbsp;</span></i><span style=3D"font-size: 11.0pt; color: black;"></span></=
p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
LEGAL NOTICE: This email does not constitute legal advice and is not intend=
ed to establish any attorney-client relationship. You should seek appropria=
te legal advice before taking or refraining from any action based on the co=
ntents of this email.</span></i><span style=3D"font-size: 11.0pt; color: bl=
ack;"></span></p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
&nbsp;</span></i><span style=3D"font-size: 11.0pt; color: black;"></span></=
p>
<p class=3D"MsoNormal"><i><span style=3D"font-size: 11.0pt; color: black;">=
COMPLIANCE WITH REGULATIONS: Our company operates in accordance with releva=
nt data protection regulations. If you have any concerns about how your per=
sonal data is being processed, please contact</span></i><span style=3D"font=
-size: 11.0pt; color: black;">&nbsp;<i>our company using the above details.=
</i></span><span style=3D"font-size: 11.0pt; color: black;"></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size: 11.0pt; color: black;">&nb=
sp;</span><span style=3D"font-size: 11.0pt; color: black;"></span></p>
<p class=3D"MsoNormal">&nbsp;</p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language: EN-US;">&nbsp;<=
/span></p>
<div>
<div style=3D"border: none; border-top: solid #E1E1E1 1.0pt; padding: 3.0pt=
 0cm 0cm 0cm;">
<p class=3D"MsoNormal"><b><span lang=3D"EN-US" style=3D"font-size: 11.0pt; =
font-family: 'Calibri',sans-serif;">From:</span></b><span lang=3D"EN-US" st=
yle=3D"font-size: 11.0pt; font-family: 'Calibri',sans-serif;"> SecurityMetr=
ics Support Team &lt;noreply@securitymetrics.com&gt; <br clear=3D"none"><b>=
Sent:</b> 24 July 2026 23:28<br clear=3D"none"><b>To:</b> Paul Brown (CIRC)=
 &lt;paul@castironradiatorcentre.co.uk&gt;<br clear=3D"none"><b>Cc:</b> Pau=
l Brown (CIRC) &lt;paul@castironradiatorcentre.co.uk&gt;<br clear=3D"none">=
<b>Subject:</b> PCI Scan Failed [www.vintagedoorknobs.co.uk]</span></p>
</div>
</div>
<p class=3D"MsoNormal">&nbsp;</p>
<div align=3D"center">
<table class=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding=
=3D"0" width=3D"100%" style=3D"width: 100.0%; background: #E0E0E0; border-c=
ollapse: collapse;">
<tbody>
<tr>
<td colspan=3D"1" rowspan=3D"1" valign=3D"top" width=3D"100%" style=3D"widt=
h: 100.0%; border: none; border-top: solid #DDDDDD 3.0pt; padding: 15.0pt 1=
5.0pt 15.0pt 15.0pt;">
<div align=3D"center">
<table class=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding=
=3D"0" width=3D"600" style=3D"width: 450.0pt; border-collapse: collapse;">
<tbody>
<tr>
<td colspan=3D"1" rowspan=3D"1" valign=3D"top" style=3D"padding: 0cm 0cm 0c=
m 0cm;">
<div align=3D"center">
<table class=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding=
=3D"0" width=3D"100%" style=3D"width: 100.0%; border-collapse: collapse;">
<tbody>
<tr>
<td colspan=3D"1" rowspan=3D"1" valign=3D"top" width=3D"180" style=3D"width=
: 135.0pt; padding: 7.5pt 15.0pt 0cm 0cm;"></td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
<tr>
<td colspan=3D"1" rowspan=3D"1" valign=3D"top" style=3D"padding: 0cm 0cm 0c=
m 0cm; -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%;">
<div align=3D"center">
<table class=3D"MsoNormalTable" id=3D"templateHeader" border=3D"1" cellspac=
ing=3D"0" cellpadding=3D"0" width=3D"70%" style=3D"width: 70.0%; border-col=
lapse: collapse; border: none; -ms-text-size-adjust: 100%; -webkit-text-siz=
e-adjust: 100%;">
<tbody>
<tr>
<td colspan=3D"1" rowspan=3D"1" style=3D"border: none; border-bottom: solid=
 #CCCCCC 1.0pt; padding: 0cm 0cm 0cm 0cm;"></td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
<tr>
<td colspan=3D"1" rowspan=3D"1" valign=3D"top" style=3D"padding: 0cm 0cm 0c=
m 0cm; -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%;">
<div align=3D"center">
<table class=3D"MsoNormalTable" id=3D"templateBody1" border=3D"0" cellspaci=
ng=3D"0" cellpadding=3D"0" width=3D"90%" style=3D"width: 90.0%; border-coll=
apse: collapse; -ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%;=
">
<tbody>
<tr>
<td colspan=3D"1" rowspan=3D"1" valign=3D"top" style=3D"background: #E0E0E0=
; padding: 0cm 0cm 0cm 0cm;">
<h1 align=3D"center" style=3D"margin: 0cm; text-align: center; mso-line-hei=
ght-alt: 19.5pt;"><span style=3D"font-size: 19.5pt; font-family: 'Helvetica=
 sans-serif',serif; color: #666666;"><img id=3D"_x0000_i1026" border=3D"0" =
width=3D"250" height=3D"51" style=3D"width: 2.6in; height: .5333in;" src=3D=
"http://info.securitymetrics.com/l/47362/2017-06-16/583shx/47362/121679/SM_=
Logo_RGB_2015.png"></span><span style=3D"font-size: 19.5pt; font-family: 'H=
elvetica sans-serif',serif; color: #666666;"></span></h1>
</td>
</tr>
</tbody>
</table>
</div>
<p align=3D"center" class=3D"MsoNormal" style=3D"text-align: center;"><span=
 style=3D"display: none;">&nbsp;</span></p>
<div align=3D"center">
<table class=3D"MsoNormalTable" id=3D"templateBody" border=3D"0" cellspacin=
g=3D"0" cellpadding=3D"0" width=3D"90%" style=3D"width: 90.0%; border-colla=
pse: collapse; -ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%;"=
>
<tbody>
<tr>
<td colspan=3D"1" rowspan=3D"1" valign=3D"top" width=3D"70%" style=3D"width=
: 70.0%; background: white; padding: 22.5pt 22.5pt 22.5pt 22.5pt;">
<p class=3D"MsoNormal" style=3D"margin-bottom: 37.5pt; line-height: 15.75pt=
;"><span style=3D"font-size: 10.5pt; font-family: 'Helvetica sans-serif',se=
rif; color: #666666;"><br clear=3D"none"></span><span style=3D"font-family:=
 'Helvetica-Light sans-serif',serif; color: #666666;">Hello Paul, <br clear=
=3D"none"><br clear=3D"none">Your ASV Vulnerability Scan has failed for the=
 following PCI Site Certification:<br clear=3D"none"><br clear=3D"none">Tar=
get: <a shape=3D"rect" href=3D"http://www.vintagedoorknobs.co.uk/" target=
=3D"_blank" rel=3D"noopener noreferrer">www.vintagedoorknobs.co.uk</a> SCID=
: 1972636 <br clear=3D"none"><br clear=3D"none">Your scan 13766852 failed t=
o pass because one or more failing vulnerabilities were found. To view and =
resolve your failing vulnerabilities please log into your SecurityMetrics a=
ccount. <br clear=3D"none"><br clear=3D"none"><a shape=3D"rect" href=3D"htt=
p://www.securitymetrics.com/login?utm_source=3Dsystem-email&amp;utm_medium=
=3Demail&amp;utm_campaign=3Drenewal" target=3D"_blank" rel=3D"noopener nore=
ferrer"><b><span style=3D"color: #2196f3;">Click here to log into your acco=
unt</span></b></a> <br clear=3D"none"><br clear=3D"none">If you have any qu=
estions or concerns, please contact our 24/7 Technical Support team. You ca=
n email or call us at: <br clear=3D"none"><br clear=3D"none">Email: <a shap=
e=3D"rect" href=3D"mailto:support@securitymetrics.com" target=3D"_blank" re=
l=3D"noopener noreferrer">support@securitymetrics.com</a> <br clear=3D"none=
">Phone: 801.705.5700 (USA) <br clear=3D"none">Phone: 877.705.6070 (Canada)=
 <br clear=3D"none">Phone: 0203.014.7825 (UK) <br clear=3D"none"><br clear=
=3D"none">Sincerely, <br clear=3D"none"><br clear=3D"none">SecurityMetrics<=
br clear=3D"none">Technical Support<br clear=3D"none"><a shape=3D"rect" hre=
f=3D"http://www.securitymetrics.com/" target=3D"_blank" rel=3D"noopener nor=
eferrer">www.securitymetrics.com</a> </span><span style=3D"font-size: 10.5p=
t; font-family: 'Helvetica sans-serif',serif; color: #666666;"></span></p>
</td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
<tr>
<td colspan=3D"1" rowspan=3D"1" valign=3D"top" style=3D"padding: 0cm 0cm 0c=
m 0cm; -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%;">
<div align=3D"center">
<table class=3D"MsoNormalTable" id=3D"templateFooter" border=3D"0" cellspac=
ing=3D"0" cellpadding=3D"0" width=3D"90%" style=3D"width: 90.0%; border-col=
lapse: collapse; -ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%=
;">
<tbody>
<tr>
<td colspan=3D"1" rowspan=3D"1" valign=3D"top" style=3D"padding: 0cm 15.0pt=
 30.0pt 15.0pt; -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%;=
">
<p align=3D"center" style=3D"text-align: center; line-height: 11.25pt;"><sp=
an style=3D"font-size: 7.5pt; font-family: 'Helvetica sans-serif',serif; co=
lor: gray;">This is a service message from SecurityMetrics, Inc., 1275 West=
 1600 North, Orem, UT 84057.</span></p>
</td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
</tbody>
</table>
</div>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><br clear=3D"none"></span><span=
 lang=3D"EN-US"><img id=3D"_x0000_i1025" border=3D"0" width=3D"1" height=3D=
"1" style=3D"width: .0083in; height: .0083in;" src=3D"http://url4764.securi=
tymetrics.com/wf/open?upn=3Du001.5tb61hZtmdNQ-2B5AW-2Far1s06qARMctjWVNUAb7J=
ndsVSCnrdX-2BFs41xPGEMSngI0gdKb0K0eQCLdM7Yr8hNejemCyvMaqxBCC2Jcq3WS9hnASlDH=
jY-2BsD2MIQC6QzG26R9puiFUZFZyd8-2F1S5HcN5L1wX6ewZSQvJ3zrjE8uUp7EyqCNWvqWWau=
7HEJwQe0qv4-2B0Z9luHVe2sGiNW8wtATG1txrzW4bsh3EkrXZLDQS8-3D"></span><span la=
ng=3D"EN-US"></span></p>
</div><img alt=3D"" src=3D"https://securitymetrics.my.salesforce.com/servle=
t/servlet.ImageServer?oid=3D00Di0000000HRXE&esid=3D018Rm00001CDMlM&from=3De=
xt"></html>
------=_Part_2057_1284139422.1785163902127--

------=_Part_2058_107430949.1785163902127
Content-Type: image/png; name="image001.png"
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="image001.png"
Content-ID: <33791714-3e30-42a9-b470-e4a554b05637@Image_0_>
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------=_Part_2058_107430949.1785163902127--