Web application security problems are as serious as network security problems, but have received considerably less attention to date. Attackers have begun to focus on web application security problems, and are actively developing tools and techniques for detecting and exploiting them. This Top Ten list is only a starting point for those flaws that represent the most serious risks to web application security.