Input Validation

Microsoft UK Events Website Hacked

(via www.windowsecurity.com)

Automating web application security testing

(via googleonlinesecurity.blogspot.com)