White-paper from Imperva’s Application Defense Center discussing the possibility of automated, self-propagating attacks on custom web application code. It shows that such attacks are not only feasible but that their theoretical success rate is far great than worms targeting commercial infrastructure.
You can download it from the following link: https://packetstormsecurity.com/files/download/32984/Application_Worms.pdf
Source: https://packetstormsecurity.com/files/32984/Application_Worms.pdf.html