Web Application Vulnerablilites

Web Application Vulnerabilities and Potential Problem Due to Bad Design

1. Input Validation: Attacks performed by embedding malicious strings in query strings, form fields ,cookies , and Http headers. (Command execution,cross-site scripting(XSS),SQL injection ,buffer overflow attacks).
2. Authentication : spoofing,password cracking, and unauthorized access.
3. Authorization : Access to confidential or restricted data,tampering and execution of unauthorized operations
4. Configuration Management : Unauthorized access to administrative interfaces,unauthorized access to user accounts and profiles.
5. Sensitive Data : Information disclosure and data tampering
6. Auditing Logging : Failure to identify the intrusion,difficulties of identification
7. Session Management : Capturing the session and hijacking them
8. Cryptography : Breaking the Encrypted data by using encrypt and decrypt algorithms
9. Exception Management : Handling the exceptions if the exceptions are not handled properly there may be a chance to crash the application.