Common web app vulnerabilities: OWASP Top 10