The security issues of Web applications are divided by the situation they exist, and there are a variety of things that are not intended to be introduced here, but are only common ones.
A list of common Web application security issues: 1, cross-site scripting attacks (CSS or XSS, crosses Site Scripting) 2, SQL injection Attack (SQL injection) 3, remote command Execution (code execution, personally think translated into code execution is not exact) 4, directory Traversal (D Irectory traversal) 5, file contains (Files inclusion) 6, script code exposure (scripts source code Disclosure) 7, HTTP request header additional carriage return line feed character injection (CRLF Injecti On/http response splitting) 8, cross Frame Scripting attack (crosses frame Scripting) 9, PHP code injection (PHP codes injection) 10, XPath injection 11, Co Okie tampering (Cookie manipulation) 12, url redirection (URL redirection) 13, Blind Sql/xpath injection for numeric/string inputs 14, Goo GLE Hacking |
The security issues of Web applications are divided by the situation they exist, and there are a variety of things that are not intended to be introduced here, but are only common ones.