An application audit is one of the major components to be performed in a configuration and compliance audit. Instead of simply checking for configuration uses, it is always recommended to hunt for security bugs in the application caused by poorly built modules and services; for example, an application module allowing user input directly into SQL queries without any sanitization. This could allow an attacker with basic knowledge of SQL to craft queries and dump the entire database without having any network-level access directly to the database. It is very important for everyone to understand the significance of end-to-end security.
The following are the top 10 most critical web application security risks, as listed by OWASP: ...
