There are a wide range of vulnerabilities out there, but most knowledge bases presume prior knowledge of web application security. Consider these “introductory articles” to vulnerabilities – a starting point to begin building further knowledge.
* Why Firewalls Aren’t Everything – sometimes the most devious traffic can look innocent
* SQL Injection – how to achieve it, and what the risks are
* Cross-Site Scripting (XSS) – the easiest attack ever
* XSS Unleashed – some more advanced XSS techniques explained
http://www.codescanlabs.com/research/vu ... explained/
