CVE-2013-4098: Improper Input Validation

ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject arbitrary error-page text via the message parameter...

PT-2013-4851

Name of the Vulnerable Software and Affected Versions DS3 Authentication Server affected versions not specified Description The issue allows remote attackers to inject arbitrary error-page text via the message parameter in the ServerAdmin/ErrorViewer.jsp page. Recommendations At the moment, there...