r/AskNetsec•
Fledgeling

Website 404s with special characters used in password. Is this a vulnerability?

I found a website that 404s whenever I use a '>' in the password field. Could this be a vulnerability or is it just terrible programming practice?

Error 404--Not Found

The error screen I get:

From RFC 2068 Hypertext Transfer Protocol -- HTTP/1.1:

10.4.5 404 Not Found

The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.

Posted Dec 2, 2012, 6:15 PM UTC

73
Loading comments…