Marko writes " I wrote a small paper scratching the surface on logic vulnerabilities."

"Most web application auditing papers have concentrated on things like SQL injection, Crosssite Scripting and similar attacks, that are more technical in nature. What I try to accomplish with this small paper and it's examples is to give some insight into the area of logic problems that can be present in a web application."

Article Link: http://www.liquidinfo.net/papers/index.html