Most web applications are vulnerable

tlu · Sep 10, 2008

The Web Application Security Consortium (WASC) issued a Web Application Security Statistic report that shows that most web applications are vulnerable.

Data analysis shows that more than 7% of analyzed sites can be compromised automatically. About 7.72% applications had a high severity vulnerability detected during automated scanning ... Detailed manual and automated assessment using white and black box methods shows that probability to detect high severity vulnerability reaches 96.85%.
Click to expand...

The most prevalent vulnerabilities found are Cross-Site Scripting (XSS) 41%, Information Leakage 32%, SQL Injection 9% and Predictable Resource Location 8%.

Cross-site request forgery vulnerabilities (see also here) were not analyzed. The results probably would have been even more disastrous.

Log in or Sign up

Most web applications are vulnerable

tlu Guest

Log in or Sign up

Most web applications are vulnerable

tlu Guest

Useful Searches