Apache Httpd < 1.3.27 : Error page XSS using wildcard DNS

Cross-site scripting XSS vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header...

Macromedia Sitespring 1.2 - Default Error Page Cross-Site Scripting

Macromedia Sitespring 1.2 - Default Error Page Cross-Site Scripting...

Macromedia Sitespring 1.2 - Default Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/5249/info Macromedia Sitespring is a J2EE-compliant product for managing website production. The Macromedia Sitespring server runs on Microsoft Windows operating systems. A cross-site scripting issue has been reported in the default error page used by...