A Review on Security Exposures on Web Application

Abstract

Now a day, Web applications are essential, general distributed systems whose existing
security relies mostly on server-side mechanisms. Web applications offer end users during client
access to server functionality during a set of Web pages. These pages repeatedly enclose script code to
be executed vigorously within the client Web browser. The majority Web applications intend to
impose perceptive security policies, simple, such as, for Web-based email, prohibiting any scripts in
untrustworthy emails. Still, Web applications are at present subject matter to a embarrassment of
successful attacks, such as the recent self-propagating worms, session riding, cookie theft, browser
hijacking, and cross-site scripting in Web-based email and social networking web-sites . This paper
looks at five universal Web application exposures, their countermeasures and paradigms to reduce
ordinary security exploits and to protect the talented class of rich, cross-domain Web applications.