Web Application Security Vulnerabilities

• Cross-Site Scripting (XSS)
• File Inclusion - Local and Remote File Inclusion
• NoSQL Injection - Server-Side JavaScript Injection & Other NoSQL Injection Vulnerabilities
• SQL Injection
  • MySQL
  • Oracle
• Server-Side JavaScript Injection
• Command Execution (OS Commanding)

Examples of vulnerable code (By Language)

• ASP (Classic ASP, ASP.NET)
• PHP
• JSP (JavaServer Pages)
• LP (Lua Pages)
• Lua