Copyright © 2026 Authors retain the copyright of this article. This article is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

@article{194750,
        author = {Krishna Veni Ampolu},
        title = {An Intelligent Web Vulnerability Scanning System for Detecting Security Threats in Web Applications},
        journal = {International Journal of Innovative Research in Technology},
        year = {2026},
        volume = {12},
        number = {10},
        pages = {5906-5913},
        issn = {2349-6002},
        url = {https://ijirt.org/article?manuscript=194750},
        abstract = {In the modern digital world, websites have become an essential part of daily life, handling large amounts of sensitive user information such as personal details, authentication credentials, and financial data. As web applications grow in complexity, they also become more vulnerable to security threats caused by insecure coding practices, outdated software, and a lack of regular security testing. Cyber attacks such as SQL Injection and Cross-Site Scripting (XSS) can lead to data breaches, service disruption, and loss of user trust. Therefore, identifying and fixing security vulnerabilities at an early stage is a critical requirement for any web-based system. This project presents a Website Vulnerability Scanning System designed to automatically analyze web applications and detect common security vulnerabilities. The system accepts a website URL as input and performs a structured scanning process that includes crawling web pages, analyzing input fields, and testing the application against known vulnerability patterns. The proposed solution focuses on identifying widely occurring web threats such as SQL Injection, Cross-Site Scripting (XSS), insecure HTTP headers, open ports, and mis configurations. The final output of the system is a detailed vulnerability report that includes the type of vulnerability, severity level, description, and recommended mitigation techniques. This automated approach significantly reduces the time and effort required for manual security testing. The proposed system is cost-effective, scalable, and suitable for real-world applications, making it a practical solution for improving website security and supporting secure web development practices.},
        keywords = {Website Vulnerability Scanning, Web Application Security, SQL Injection Detection, Cross-Site Scripting (XSS), Python and Flask Framework,},
        month = {March},
        }