4. Feedback

4.1 Problems encountered during audits

In terms of spot audits, we noted the following :

• common XSS vulnerabilities, in particular DOM-Based XSS ;

• SQL injection vulnerabilities are becoming less and less common;

• very rare file/resource injection vulnerabilities ;

• vulnerabilities involving inadequate protection of sensitive data (e.g. passwords), which are quite common ;

• common misconfiguration vulnerabilities.

There are several possible reasons...