WAF Vulnerability Test Suite

7

Vulnerabilities

100%

Unprotected (without WAF)

SQL

SQL Injection

CWE-89 - Critical

Opens in raw PHP page - shows real SQL errors on white background

XSS

Reflected XSS

CWE-79 - High

STR

Stored XSS

CWE-79 - Critical

UP

File Upload

CWE-434 - Critical

NET

SSRF

CWE-918 - High

REQ

CSRF

CWE-352 - Medium

DIR

Directory Traversal

CWE-22 - High