Some recent statistics on web application vulnerabilities

Jeremiah Grossman released a report last month giving a statistical view on current website vulnerabilities, accompanied by some expert analysis and recommendations.

Some highlights:

• 67% of sites suffer from Cross site scripting
• 17% of sites suffer from SQL Injection
  

Listen to the Jeremiah Grossman's presentation (68 minutes)
Download a PDF of the presentation (849 KB PDF)
Download a PDF of the the report

Related articles:

• Presentations from the European OWASP Application Security Conference
• OWASP WebGoat Version 5.0 released
• Paper: XSIO "Cross Site Image Overlaying"
• Presentations from Belgian OWASP Day (updated)
• Best Web Application Scanner Finds 15.3% of Vulnerabilities