- • 404 page
- • Search Page
- • PHP_SELF
- • $_GET, $_POST, $_COOKIE
- • $_SERVER
- • Expect header stupidity in Apache
- • Charset detection stupidity in IE
- • Arbitary header injection stupidity in IE
- • Host header spoofing stupidity in IE
- • Request splitting stupidity in IE
- • Never-ending URL Handler Exploits
- • Steady flow of browser bugs in all browsers
