• KOTA SUBRAHMANYA KASHYAP
• KUDA NAGESWARA RAO
• MALLAVALLI SITHA RAM

Cyber-attacks became more refined with attackers using new techniques to exploit vulnerabilities present in existing systems. Even when developers try to remove these vulnerabilities, attackers find other ways to exploit systems. Applications with underlying vulnerabilities pave way to be exploited. Web Applications typically contain a vulnerability known as Cross-site scripting. This vulnerability allows attackers to send malicious code in form of scripts which get executed at client side into web pages which are viewed by different users. Attackers can use this vulnerability to access controls such as same origin policy. An attacker creates a payload which is basically a file (in this case a php file) which is uploaded into the server. When a user accesses a web page using browser, the malicious script is executed and the server is accessed by the attacker. Additionally, attacker can also send input which can be captured later by another script externally. The browser on user side will execute the script since it can't validate it. This script can access session tokens, cookies and sensitive information stored by the browser. This vulnerability can be forestalled with appropriate measures. Data Validation is one such measure which can be used to forestall cross-site scripting vulnerability.

Cyber-attacks, Web applications, Cross-site scripting, PHP vulnerability.

"A STUDY ON EXPLOITATION AND PREVENTION FOR PHP VULNERABILITY IN WEB APPLICATIONS", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.6, Issue 6, page no.638-644, June 2019, Available :http://www.jetir.org/papers/JETIR1907976.pdf

"A STUDY ON EXPLOITATION AND PREVENTION FOR PHP VULNERABILITY IN WEB APPLICATIONS", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.6, Issue 6, page no. pp638-644, June 2019, Available at : http://www.jetir.org/papers/JETIR1907976.pdf