<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Computer Security Is My Interest! &#187; OWASP top 10</title>
	<atom:link href="http://soroush.secproject.com/blog/tag/owasp-top-10/feed/" rel="self" type="application/rss+xml" />
	<link>http://soroush.secproject.com/blog</link>
	<description>Soroush Dalili&#039;s blog - بلاگ سروش دلیلی</description>
	<lastBuildDate>Thu, 02 Sep 2010 00:49:31 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>My belief: 70% of websites are vulnerable</title>
		<link>http://soroush.secproject.com/blog/2009/11/my-belief-70-of-websites-are-vulnerable/</link>
		<comments>http://soroush.secproject.com/blog/2009/11/my-belief-70-of-websites-are-vulnerable/#comments</comments>
		<pubDate>Sun, 29 Nov 2009 15:57:31 +0000</pubDate>
		<dc:creator>Soroush Dalili</dc:creator>
				<category><![CDATA[Security Articles]]></category>
		<category><![CDATA[Security Posts]]></category>
		<category><![CDATA[Critical vulnerabilities]]></category>
		<category><![CDATA[CSRF Attacks]]></category>
		<category><![CDATA[OWASP top 10]]></category>
		<category><![CDATA[SQL Injection Vulnerability]]></category>
		<category><![CDATA[website vulnerability]]></category>
		<category><![CDATA[XSS Vulnerability]]></category>

		<guid isPermaLink="false">http://soroush.secproject.com/blog/?p=180</guid>
		<description><![CDATA[When I was searching for a ticket in nationalrail.co.uk website, I suddenly found an XSS and also a SQL Injection vulnerabilities in it. I reported these two vulns. to its website just for having more security. And, I think these two vulnerabilities are fixed now. However, I believe that still 70% of webistes are vulnerable [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: justify;">When I was searching for a ticket in nationalrail.co.uk website, I suddenly found an XSS and also a SQL Injection vulnerabilities in it.</p>
<p style="text-align: justify;">I reported these two vulns. to its website just for having more security. And, I think these two vulnerabilities are fixed now.</p>
<p style="text-align: justify;">However, <strong>I believe that still 70% of webistes are vulnerable against the <a href="http://owasp.org/">OWASP</a> TOP 10! </strong></p>
<p style="text-align: justify;">Also, I think you should read &#8220;<a href="http://www.securityfocus.com/brief/1036"><span>Survey: Majority of Web sites vulnerable</span></a>&#8221; as well.</p>
<p style="text-align: justify;">Cheers,</p>
<p style="text-align: justify;">Soroush</p>
<p style="text-align: justify;">
]]></content:encoded>
			<wfw:commentRss>http://soroush.secproject.com/blog/2009/11/my-belief-70-of-websites-are-vulnerable/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
