Static analysis approaches to detect SQL injection and cross site scripting vulnerabilities in web applications: A survey
Mining SQL injection and cross site scripting vulnerabilities using hybrid program analysis