Although there are numerous reports covering viruses, network-based attacks, and Phishing schemes, there is little empirical data on the attacks that specifically target web applications.This report aims to shed light on how applications are being attacke