Web Application Vulnerabilities and Countermeasures

Abstract

The main objective of this thesis was to study the top three web application vulnerabilities such as SQL injection, Cross-Site Scripting and Cross-SiteRequest Forgery.The thesis focuses on the working mechanism of these three vulnerabilities, the implementation of the attack and the prevention method for each vulnerability.During the project, the language, such as HTML, PHP, JavaScript and CSS,was used and MySQL database was in practice for implementing these three vulnerabilities using a localhost as a web host. Each vulnerability in web applications was tested using different techniques.The result of the test shows that web vulnerabilities can do severe damage toan application. Thus, web applications need to include proper preventive measures to avoid these vulnerabilities from being exploited.