Web security

This thesis is focused on web pages security problematic, specifically web application problematic. These applications usage is wider then classical static web pages. Problem of web application is a security. They are normally reachable form anybody on internet and it is strong motivation for attackers. Main topic of this thesis is web e-commerce application Magento and security analysis of specific vulnerability which allows full control for attacker. Other goals are risk and vulnerability analysis connected with web pages development such as SQL Injection or Cross-Site Scripting. Also comparison of vulnerable Magento version and its secured version. Last goal is recommendations about own attacked e-shop