The web hacking incident database (WHID) is a Web Application Security Consortium project dedicated to maintaining a list of web applications related security incidents.WHID goal is to serve as a tool for raising awareness of the web application security problem and provide information for statistical analysis of web applications security incidents.
|
"Thanks so much for the WHID, having a public repository such as this makes it easier for security practitioners to justify what they do for their colleagues. You make my job easier, thanks!" -Erik Cabetas, Security Officer for a large E-Commerce website. |
The database is unique in tracking only media reported security incidents that can be associated with a web application security vulnerability. Refer to the FAQ for further information on what you will find and what you will not find in WHID.If you have additional information on those or other web hacking incidents, you are more than welcome to share this information with us.
Drill Down
Disclaimers: WHID is based entirely on public information. All the incidents listed here where reported publicly before on other web sites and each incident includes references to those sites. Please also note that unless mentioned otherwise all the vulnerabilities listed have already been fixed.
