and weaknesses in web applications. The 2002 Top Ten has been widely
cited as a minimum standard for web application security, providing
the basis upon which a number of other application and software
security vulnerability taxonomies have been defined. All of the major