10026β€”HTTP Parameter Override

PUBLISHEDsecurity alertMedium
Passive

Metadata

Alert ID:
10026
Risk:
Medium
Type:
Passive

Summary

Unspecified form action: HTTP parameter override attack potentially possible. This is a known problem with Java Servlets but other platforms may also be vulnerable.

Solution

All forms must specify the action URL.

References