Discover additional attacks against web apps using weak or broken authentication methods and how cross-site scripting can be used to execute code.
Certified Ethical Hacker - CEHv10: Common Web App Threats Part 2