Yuwei LI

DISOV: Discovering Second-Order Vulnerabilities Based on Web Application Property Graph

2022 · IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences

Web application second-order vulnerabilities first inject malicious code into the persistent data stores of the web server and then execute it at later sensitive operations, causing severe impact. Nevertheless, the dynamic features, the complex data …