Text injection on error page.

Summary

An user or attacker is able to inject his text into error page and can trap to user to visit malicious sites. Even if the XSS or error custom based 404 pages (error injecting) is not on the scope of our program,our committee decided to disclose it publicly.