#Web vulnerabilities

Web vulnerabilities are weaknesses in websites and web applications that attackers can use to read data, change content or take control. Well-known examples include SQL injection, cross-site scripting, broken access control and outdated software with published flaws. Most of them come from code that trusts user input too much or from components that are no longer updated. They affect small sites built on popular content management systems as much as large custom applications. Understanding the common types helps owners ask the right questions of developers and hosting providers. The articles under this tag explain how the main vulnerabilities work and which practical measures prevent them.