It's 2017, and command injection is still the top threat to web apps

Open Web Application Security Project updated 'top-ten risks' lands on Monday, but we found a late, late draft

The Open Web Application Security Project will on Monday, US time, reveal its annual analysis of web application risks, but The Register has sniffed out the final draft of the report and can report that it has found familiar attacks top its charts, but exotic exploits are on the rise."