detection and exploitation of web vulnerabilities, combined with
the proliferation of low-grade software applications written by
inexperienced developers. In 2005 and 2006, cross-site scripting (XSS) was number 1, and SQL injection was number 2.
2) PHP remote file inclusion (RFI) skyrocketed to number 3 in