Session expiry pages may echo password in clear text

The "session expiry" and "XSRF token missing" pages will echo any submitted values. This may result in echoing the submitted password to the page in plain text if triggered on the WebSudo authentication page. Modify the error pages sessionexpired.jsp and xsrfmissing.jsp so they don't echo...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Microdasys before 3.5.1-B708, as used in Bloxx Web Filtering before 5.0.14 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests that trigger error pages containing XSS sequences, a different...

CVE-2011-1337

Opera before 11.50 allows remote attackers to cause a denial of service disk consumption via invalid URLs that trigger creation of error pages...

Code injection

Opera before 11.50 allows remote attackers to cause a denial of service disk consumption via invalid URLs that trigger creation of error pages...

CVE-2011-1337

Opera before 11.50 allows remote attackers to cause a denial of service disk consumption via invalid URLs that trigger creation of error pages...

Opera < 11.50 Multiple Vulnerabilities

The version of Opera installed on the remote Windows host is earlier than 11.50 and thus potentially affected by multiple vulnerabilities: - An error exists in the handling of data URIs that allows cross-site scripting in some unspecified cases. Issue 995 - An error exists in the browser's handli...

Opera < 11.50 Multiple Vulnerabilities

Binary data 5971.prm...

Issue with error pages can cause a system crash

When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...

Issue with error pages can cause a system crash – Opera Security Advisories

When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...

SuSE 11.1 Security Update : kdelibs4 (SAT Patch Number 4407)

This update fixes a cross-site scripting XSS vulnerability in the way KHTML handles error pages. CVE-2011-1168 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C...

JBoss Seam privilege escalation caused by EL interpolation in FacesMessages

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language EL statements i...

KDE KHTML crossite scripting

Crossite scripting via error pages...

Chrome's Fail Folder

There’s something very retro about the “fail folder,” Google’s go-to image, which pops up on the Chrome Web browser every time you, say, lose your Internet connection. It’s colorless and two dimensional and its size and shape not so subtly recall the beloved GUI of early vintage Macs. Google made...

CPanel (error pages) Remote File Disclosure Vulnerability

Exploit for php platform in category web applications ========================================================= CPanel error pages Remote File Disclosure Vulnerability ========================================================= == Title: CPanel error pages Remote File Disclosure Vuln Author:...

Microsoft IIS HTTP错误页面导致跨站脚本执行漏洞

No description provided by source...

CVE-2009-4157

Multiple cross-site scripting XSS vulnerabilities in index.php in the ProofReader comproofreader component 1.0 RC9 and earlier for Joomla! allow remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in 1 404 or 2 error pages...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in the ProofReader comproofreader component 1.0 RC9 and earlier for Joomla! allow remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in 1 404 or 2 error pages...

CVE-2009-4157

Multiple cross-site scripting XSS vulnerabilities in index.php in the ProofReader comproofreader component 1.0 RC9 and earlier for Joomla! allow remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in 1 404 or 2 error pages...

TwonkyMedia Web Server crossite scripting

Crossite scripting on error pages...

Cross site scripting

Cross-site scripting XSS vulnerability in the web user interface in the login application in NetMRI 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to error pages...