Most common web application security risks

The Open Web Application Security Project (OWASP) is an online community focused on web application security. They offer useful information, including documentation, methodologies, and tools. I invite you to visit their website: https://www.owasp.org.

One of the things that they produce every year is a document listing the top web application security risks. In this section, we will take a look at some more recent risks.

Injection

 

This security risk occurs when untrusted data is sent to an interpreter and unintended commands are executed. This can cause unauthorized data to be accessed or manipulated. Anyone who can send untrusted data, including external and internal users, are possible threat agents.

A common form of injection is SQL injection (SQLi), where SQL statements are included in data (such as user input) and are then unknowingly executed against the database. Among other things, a SQL injection attack could be used to retrieve, alter, or...