Most websites are hosted on public servers which are accessible via the Internet. This makes the websites vulnerable to attacks due to easy accessibility. The following are most common websites threats.

1. SQL Injection – the goal of this threat could be to bypass login algorithms, sabotage the data, etc.
2. Denial of Service Attacks– the goal of this threat could be to deny legitimate users access to the resource
3. Cross Site Scripting XSS– the goal of this threat could be to inject code that can be executed on the client side browser.
4. Cookie/Session Poisoning– the goal of this threat is to modify cookies/session data by an attacker to gain unauthorized access.
5. Form Tampering – the goal of this threat is to modify form data such as prices in e-commerce applications so that the attacker can get items at reduced prices.
6. Code Injection – the goal of this threat is to inject code such as PHP, Python, etc. that can be executed on the server. The code can install backdoors, reveal sensitive information, etc.
7. Defacement– the goal of this threat is to modify the page been displayed on a website and redirecting all page requests to a single page that contains the attacker’s message.

The attacker has access to the website and he would like to hijack the sessions of other users that use the same website.