Web application vunerabilities Detect, exploit,prevent - Palmer (Syngress, 2007)