Application Error Disclosure -sensitive data disclose

Shailesh Kumavat kumawatshailesh7 at
Tue Nov 21 06:56:14 EST 2017

Hi Sir,
  I am found some vulnerability in your site . i fount some data , email .
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
Content-Type: text/html
Accept-Ranges: bytes
ETag: "1713417860"
Last-Modified: Mon, 31 Mar 2014 02:55:02 GMT
Content-Length: 15472
Date: Tue, 21 Nov 2017 11:33:15 GMT
Server: lighttpd

description= This page contains an error/warning message that may disclose
sensitive information like the location of the file that produced the
unhandled exception. This information can be used to launch further attacks
against the web application. The alert could be a false positive if the
error message is found inside a documentation page.

solution=Review the source code of this page. Implement custom error pages.
Consider implementing a mechanism to provide a unique error
reference/identifier to the client (browser) while logging the details on
the server side and not exposing them to the user.

some Information=

* Phillip Akhzar pakhzar at
Mon Mar 17 16:47:56 EDT 2014 *

   - *Previous message: Hello
   - *Next message: Hello
   - *Messages sorted by: [ date ]
   <> [ thread ]
   <> [
   subject ]
   <> [
   author ] <>*


*Someone I could speak with? I'm curious about the business and
permissions it took.



> On Mar 17, 2014, at 12:33 PM, David Woolley <forums at <>> wrote:
>> On 17/03/14 18:41, Phillip Akhzar wrote:
>> Was wondering about the founders of this company and how difficult something like this was to develop.
> I don't believe they are incorporated.
>> for entrepreneurship.
> If they are incorporated, it will be as a not-for-profit.

Shailesh Kumavat.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the security mailing list