2

A website I frequently visit is showing an error message.

The usual Click 'here' link actually shows

Click '$host_variable.xxxxxxName'

to navigate to a certain page.

Is it a security flaw? How?

4

To me this seems more like a bug than a security flaw. If the security of the site were breached, I would expect that the text remains the same (cause now it looks suspicious), but only the actual href changing to some malicious host. It could however well be that there is malicious intent involved here, which could best be confirmed by validating the destination of the link.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.