Answer: Many web vulnerabilities are difficult to classify
because they are ‘multi-factor,’ i.e., they are composed of
multiple bugs, weaknesses, and/or design limitations. Other
web issues are really just specialized attacks that use other