Category : General

Session Management-Multiple Sessions Allowed | Techbirds

Posted on: April 10, 2019 /
Categories: General

Posted on: September 16, 2014 / Categories: General / Author Name: Piyush Jain It is possible for a user to initiate multiple concurrent sessions using just one username/password combination. If multiple users are allowed to log in to the same account simultaneously, non-repudiation is lost. The existence of multiple sessions generated from the same set

Read More →

Input Validation-File Upload | Techbirds

Posted on: April 10, 2019 /
Categories: General

Posted on: September 16, 2014 / Categories: General / Author Name: Piyush Jain File Upload Capability allows a Web user to send a file from his or her computer to the Web server. If the Web application that receives the file does not carefully examine it for malicious content, an attacker may be able to

Read More →

Information Leakage-Error Messages | Techbirds

Posted on: April 10, 2019 /
Categories: General

Posted on: September 16, 2014 / Categories: General / Author Name: Piyush Jain Information Leakage Through Error Messages The application reveals information about how data validation is being performed, required data formats, or other information an attacker can use to construct malicious payloads to insert into requests. To Ensure it, Replace all error messages with

Read More →