This document discusses common web application security risks including injection, session hijacking, cross-site scripting, insecure direct object references, security misconfiguration, sensitive data exposure, functional level access control, cross-site request forgery, using known vulnerable components, and unvalidated redirects and forwards. The document was created by Stijn Jans of the Security Factory and provides their contact information.
1 of 7
Download to read offline
More Related Content
Going Mobile at a Glance - What about security
2. SO LETS TALK ABOUT SECURITY
the Security Factory Stijn Jans stijn.jans@thesecurityfactory.be
5. Injection
Session hijacking
Cross-Site Scripting (XSS)
Insecure Direct Object References
Security Misconfiguration
Sensitive Data Exposure
Functional Level Access Control
Cross-Site Request Forgery (CSRF)
Using Known Vulnerable Components
Unvalidated Redirects and Forwards