• Arindam Halder
• Dr. Pranam Paul

Nowadays the Internet is closely related to our daily life. We enjoy the quality of service the provided by The Internet at the same time, but also suffer from the threat of network security [6] .Current day web applications provide a lot more services than simple content delivery [4]. Web-based model of computing and Web applications (Like e-commerce, banking, shopping, trading, blogs etc) have been subject several attacks such as cross-site scripting, SQL injection, authentication bypass and Unrestricted File upload [4] .These security vulnerabilities allow the attacker to gain control over the database of an application resulting in financial fraud, Leak of confidential data, network hacking, deleting database, theft and many more to count [4]. In this paper we have discussed about the classification of SQL injection attacks, as well as authentication bypass and unrestricted file upload and also analysis is done on basis of risk associated with each attacks. Besides that many existing approaches were proposed to detect the attack at the database level and discussed the optimal solutions also.

Web application penetration testing, SQL Injection, Authentication Bypass, Unrestricted file upload, Cyber Security awareness.

"An Approach of Solutions for a Vulnerable Website through Penetration Testing", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.5, Issue 12, page no.18-29, December-2018, Available :http://www.jetir.org/papers/JETIR1812704.pdf

"An Approach of Solutions for a Vulnerable Website through Penetration Testing", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.5, Issue 12, page no. pp18-29, December-2018, Available at : http://www.jetir.org/papers/JETIR1812704.pdf