> For the complete documentation index, see [llms.txt](https://dev-angelist.gitbook.io/writeups-and-walkthroughs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dev-angelist.gitbook.io/writeups-and-walkthroughs/portswigger-web-security-academy/server-side-vulnerabilities.md).

# Server-side vulnerabilities

This learning path introduces you to a range of common server-side vulnerabilities. This is perfect if you're new to web security and want to get an overview of the kinds of vulnerabilities that exist, as well as how an attacker might identify and exploit them in real-world systems.

#### **Topics**

> 1. [Path traversal](/writeups-and-walkthroughs/portswigger-web-security-academy/server-side-vulnerabilities/path-traversal.md)
> 2. [Access control](/writeups-and-walkthroughs/portswigger-web-security-academy/server-side-vulnerabilities/access-control.md)
> 3. [Authentication](/writeups-and-walkthroughs/portswigger-web-security-academy/server-side-vulnerabilities/authentication.md)
> 4. [Server-side request forgery (SSRF)](/writeups-and-walkthroughs/portswigger-web-security-academy/server-side-vulnerabilities/server-side-request-forgery-ssrf.md)
> 5. [File upload vulnerabilities](/writeups-and-walkthroughs/portswigger-web-security-academy/server-side-vulnerabilities/file-upload-vulnerabilities.md)
> 6. [OS command injection](/writeups-and-walkthroughs/portswigger-web-security-academy/server-side-vulnerabilities/os-command-injection.md)
> 7. [SQL injection](/writeups-and-walkthroughs/portswigger-web-security-academy/server-side-vulnerabilities/sql-injection.md)