OWASP’s list have been changed since 2004 in terms of priorities; XSS and inject flaws are on the rise. Details can be found on OWASP’s website.
2007
2004
A1 - Cross Site Scripting (XSS)
A1 - Unvalidated Input
A2 - Injection Flaws
A2 - Broken Access Control
A3 - Malicious File Execution
A3 - Broken Authentication and Session Management
A4 - Insecure Direct Object Reference
A4 - Cross Site Scripting
A5 - Cross Site Request Forgery (CSRF)
A5 - Buffer Overflow
A6 - Information Leakage and Improper Error Handling
A6 - Injection Flaws
A7 - Broken Authentication and Session Management
A7 - Improper Error Handling
A8 - Insecure Cryptographic Storage
A8 - Insecure Storage
A9 - Insecure Communications
A9 - Application Denial of Service
A10 - Failure to Restrict URL Access
A10 - Insecure Configuration Management
OWASP .NET Projects http://www.owasp.org/index.php/Category:OWASP_.NET_Project
References and Papers on Financial Data Mining
Remember Me