This assignment on software security. XSS allows injection of content in the website and modification of the display of the contents by an attacker

Software Security  Assignment

Hartpury University and Hartpury College

Contemporary World Application 2022

Presentation

This technical essay discusses the different ways of attacking a web application in PHP, including SQL injection, XSS, session hijacking, directory traversal, and remote file inclusion. It also explains the security measures to secure web-based applications. The essay also includes a PHP code for generating 500 contact details using a loop and a MySQL table creation with a detailed description of the table.

Ways of Attacking a Web Application in PHP: SQL Injection, XSS, Session Hijacking, Directory Traversal, and Remote File Inclusion

The paper provides a clear overview of the cross site scripting attack and its theoretical operation in the real world. It also illustrates the stages of the attack. Furthermore, the paper describes the outcomes of the real world incident of the cross site scripting attack. The article also brings to light the impact of the attack and clearly describes the consequences of the attack and identifies the security aim that was breached as a result of this attack. Finally, the paper also describes the specific actions performed by the vendor and organization so as to address the issue and provide counter measures to the specific vulnerability.

Software Security Assignment