So…so you think you can tell

[This was originally posted July 2003 on the now-defunct vulns.com site. Even several years later no web application scanner can automatically identify such vulnerabilities in a reliable, accurate manner — many vulnerabilities still require human analysis.] Sit and listen to Pink Floyd’s album, Wish You Were Here. “Can you tell a green field from a cold …