Some security issues for web based frameworks
P. Roberts-Morpeth, Jeremy Ellman · 2010
This report investigates whether a vulnerability found in one web framework may be used to find a vulnerability in a different web framework. To test this hypothesis, several open source applications were installed in a secure test environment together with security analysis tools. Each one of the applications were developed using a different software framework. The results show that a vulnerability identified in one framework can often be used to find similar vulnerabilities in other frameworks. Cross-site scripting security issues are the most likely to succeed when being applied to more than one framework.