Home / Vulnerability Database / PHP : Improper exception handling
PHP

PHP : Improper exception handling

Overview

The application performs some operation, such as database or file access, that could throw an exception. Since the application is not designed to properly handle the exception, the application could crash.

Improper handling of exceptions can introduce a variety of security problems for a web site. The most common problem is when detailed internal error messages such as stack traces, database dumps, and error codes are displayed to the user (attacker). These messages reveal implementation details that should never be revealed. Such details can provide attackers important clues on potential flaws in the site and such messages are also disturbing to normal users.

LOW

DerScanner Severity Score

Do you want to fix PHP : Improper exception handling in your application?

See also

PHP

PHP : Null salt

PHP

PHP : Empty password

PHP

PHP : Empty salt