Source: https://owasp.org/www-pdf-archive//OWASP_-_Ionut_Popescu_-_Less_Known_Web_Application_Vulnerabilities.pdf