Background and software developments
Web security audits - Methodologies, tools and experience return

Figure 1 describes the most common classes of vulnerabilities found on websites audited by Whitehat Security. We can see that many of the vulnerabilities exceed a rate of 20% presence, which is quite worrying. Figure 2 is based on the same principles, but with data from TrustWave.

Correlations between these two studies are observable. One example is the strong presence of "Cross-Site Scripting" and "Cross-Site Request Forgery" vulnerabilities. A full description of each of these vulnerabilities can be found at