Commons Script Security Problems

[temi]

I would like experienced programmers and script users to help with suggestion about commons security issues the script should be tested for. Its and eCommerce application coded in PHP. Here are two security problems to start the ball rolling.
- Cross site scripting attack
- Script Injection

 

[Bagi Zoltán]

• cross site scripting (xss)
• sql injection
• code execution
• directory traversal
• file inclusion
• script source disclosure
• CRLF injection
• cross frame scripting
• php code injection
• XPath injection
• FUll path disclosure
• LDAP injection
• Cookie manipulation
• URL redirection

The list above contains the scanning options of Acunetix Web Vulnerability Scanner sofware.

 

[temi]

Brilliant list Bagi, thanks very much. Anyone got more to add?