Web Application Vulnerabilities
Hackers today have an ever increasing list of weaknesses in the web application structure at their disposal, which they can exploit to accomplish a wide variety of malicious tasks.
New flaws in web application security measures are constantly being researched, both by hackers and by security professionals. Most of these flaws affect all dynamic web applications whilst others are dependent on specific application technologies. In both cases, one may observe how the evolution and refinement of web technologies also brings about new exploits which compromise sensitive databases, provide access to theoretically secure networks, and pose a threat to the daily operation of online businesses.
The following is a list of known web application vulnerabilities / threats. Acunetix WVS also scans hundreds of well known applications such as WordPress, PHPNuke, PHPMyAdmin, Mambo, phpBB, OpenX etc heuristicly for the detection of those exploits which have not yet been identified and tagged.
Subscribe to Acunetix Web Application Security Blog to keep up to date with the latest web security news 
Web Application Vulnerabilities
- Backup files Security Vulnerability
- Blind SQL/XPath injection Security Vulnerability
- Code execution Security Vulnerability
- Common files Security Vulnerability
- Cookie manipulation Security Vulnerability
- CRLF injection/HTTP response splitting Security Vulnerability
- Cross Site Scripting Security Vulnerability
- Cross Site Scripting in path Security Vulnerability
- Cross Site Scripting in URI Security Vulnerability
- DELETE Method Enabled Security Vulnerability
- Directories with executables permission enabled Security Vulnerability
- Directories with write permissions enabled Security Vulnerability
- Directory Listing Security Vulnerability
- Directory Traversal Security Vulnerability
- Email address found Security Vulnerability
- File inclusion Security Vulnerability
- Full path disclosure Security Vulnerability
- Possible sensitive files Security Vulnerability
- PUT Method Enabled Security Vulnerability
- Script source code disclosure Security Vulnerability
- Sensitive data not encrypted Security Vulnerability
- Source code disclosure Security Vulnerability
- SQL injection Security Vulnerability
- TRACE method is enabled Security Vulnerability
- TRACK method is enabled Security Vulnerability
- Trojan shell script Security Vulnerability
- URL redirection Security Vulnerability
- XFS vulnerability Security Vulnerability
- XPath Injection vulnerability Security Vulnerability