The OWASP Top 10 Application Security Risks

• Injection
  • http://labs.septeni-technology.jp/technote/tim-hieu-sql-injection-qua-vi-du-cu-the/
• Cross-Site Scripting (XSS) or here
  • http://labs.septeni-technology.jp/security/tim-hieu-ve-lo-hong-cross-site-scripting/
  • http://labs.septeni-technology.jp/security/tim-hieu-ve-lo-hong-cross-site-scripting-phan-2/
• Broken Authentication and Session Management
• Insecure Direct Object References
• Cross-Site Request Forgery (CSRF)
• Security Misconfiguration*
• Insecure Cryptographic Storage
• Failure to Restrict URL Access
• Insufficient Transport Layer Protection*
• Unvalidated Redirects and Forwards

*May be outside the developer’s control

Read more here

Tham khảo http://securitydaily.net