Analysis of Common Web Vulnerabilities: SQL Injection, XSS, and CSRF

Abstract

This report breaks down three frequent weaknesses found in websites: SQL Injection, XSS, and CSRF. We look at how they work, examples of attacks that have happened because of them, and how often these issues show up in current security findings – such as those from OWASP. This report also looks at ways to reduce these threats, like using parameterized queries, output encoding, content security policies, cookie settings, and CSRF protection, and assesses how effective those measures are. Comparing the potential harm caused by each weakness highlights why strong coding habits and layered security are essential for modern websites.