diff -r 0aafd64866d1 roundup/cgi/actions.py
--- a/roundup/cgi/actions.py	Thu May 03 16:59:18 2012 +0200
+++ b/roundup/cgi/actions.py	Sun May 13 11:15:38 2012 +0200
@@ -1035,6 +1035,16 @@
         columns = request.columns
         klass = self.db.getclass(request.classname)
 
+        # check if all columns exist on class
+        # the exception must be raised before sending header
+        props = klass.getprops()
+        for name in columns:
+            if name not in props:
+                self.client.response_code = 404
+                raise exceptions.SeriousError(
+                    self._('%(column)s column not found on %(class)s')
+                    % {'column': name, 'class': request.classname})
+
         # full-text search
         if request.search_text:
             matches = self.db.indexer.search(