Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

SQL Injection And XSS Threats Lead To Serious Flaws In Web Apps

Calendar Nov 13, 2009 • User Avatar Anthony Pell
1 min read
General Esm H446
Topics%20covered

Topics Covered

cross-site scripting web application cyber attack SQL injection security flaws custom development
Cross-site scripting and SQL injection remain the top methods of attack. Vulnerabilities in web applications remain the primary avenue of attack for cybercriminals, according to a WhiteHat Website Security Statistics Report released this week. Organisations building custom web applications are particularly at risk, says the report, which measured data collected from January 2006 to October 2009, across more than 1,300 websites.

The problem is exacerbated because it is not possible to patch against custom web application software, such as that used by big e-commerce sites, Jeremiah Grossman, founder and CTO of WhiteHat, told SCMagazineUS.com. And that, he said, includes the vast majority of sites.

The link for this article located at SC Magazine AU is no longer available.