CVE-2015-6729

Cross-site scripting XSS vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to inject arbitrary web script or HTML via the rel404 parameter, which is not properly handled in an error page...

CVE-2014-3148

Cross-site scripting XSS vulnerability in libahttp/err.c in OkCupid OKWS OK Web Server allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to a non-existent page, which is not properly handled in a 404 error page...

CVE-2014-3148

Cross-site scripting XSS vulnerability in libahttp/err.c in OkCupid OKWS OK Web Server allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to a non-existent page, which is not properly handled in a 404 error page...

coachhousecadgwith.co.uk XSS vulnerability

Vulnerable URL: http://www.coachhousecadgwith.co.uk/error.php?msg=...

troll.farceur2.free.fr XSS vulnerability

Vulnerable URL: http://troll.farceur2.free.fr/formulaires/erreur.php?titre=Don=420=...

concenta-austria.at XSS vulnerability

Vulnerable URL: http://www.concenta-austria.at/error/error.php?message=%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

phpipam 1.1.010 Cross Site Scripting

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPIPAM0812.txt Vendor: ================================ phpipam.net Product: ====================================== phpipam-1.1.010 Vulnerability Type:...

CVE-2015-3267

Cross-site scripting XSS vulnerability in the 404 error page in Red Hat JBoss Operations Network before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the 404 error page in Red Hat JBoss Operations Network before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-3267

Cross-site scripting XSS vulnerability in the 404 error page in Red Hat JBoss Operations Network before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Design/Logic Flaw

The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server...

CVE-2015-5961

CVE-2015-5961 affects Mozilla Firefox OS before 2.2. The COPPA error page in the Accounts setup dialog embeds content from an external web server into the System process, enabling a man-in-the-middle attacker to bypass intended access restrictions by spoofing that server. Impact is described as a...

CVE-2015-5961

The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server...

Red Hat JBoss Operations Network HTTP Error Page Cross-Site Scripting Vulnerability

JBoss Operations Network is open source network management software based on Java EE. An input validation vulnerability in the JBoss Operations Network HTTP error page allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensiti...

Cisco Application and Content Networking System URL Page Return Cross-Site Scripting Vulnerability

A vulnerability in Cisco Application and Content Networking System ACNS could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks. The vulnerability is due to insufficient validation of the URL of pages that are not accessible to the end user that could be return...

Apache Sling API and Servlets Post components vulnerable to cross-site scripting

Overview Apache Sling is an open source web application framework provided by The Apache Software Foundation. Sling API and Servlet Post components included in Apache Sling contain a cross-site scripting vulnerability CWE-79 in the error page and the generation of the job completion. MORI Shingo...

Information disclosure

The web user interface in IBM WebSphere Message Broker 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.3 allows remote authenticated users to obtain sensitive information by reading the error page...

"Issue Does Not Exist" page leaks information to non-logged in users

Trying to open a URL for an issue that does not exist shows the "Issue Does Not Exist" error page, even if you are logged out and the project is not publicly viewable. In contrast, trying to open the URL for valid issue will prompt the user to login. In this way, an unprivileged user can learn...

Joomla! 1.5.x 404 Error Page Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37148/info Joomla! is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Microsoft IIS 5 User Existence Disclosure Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/7492/info Microsoft IIS is prone to an issue where the existence of users may be revealed to remote attackers. The vulnerability exists when users attempt to authenticate against a vulnerable system. IIS will generate an...