OWASP A5 – Broken Access Control

This module describes what incorrect implementation of authentication and session management functions are, and explains how it can allow attackers to assume other users’ identities.

This module covers cross-site scripting.

This module covers authentication vulnerabilities and session management.