Top 10 Application Security Vulnerabilities in Web.config Files – Part Two by Bryan Sullivan - 5/30/2007 Some of the most common and dangerous application security vulnerabilities that exist in ASP.NET Web-based applications come not from the C# or VB.NET code that make up its pages and service methods, but instead from the XML code that makes up its Web.config files.