[yxzy]

I was just hoping that you guys could tell me about some common overlooked exploits often found in websites that could be harmful but when i say tell me about it i really want the fix, not how to do it.
Thanks!

[Anima Templi]

What do you mean by "show" do you think we are going to share vulnerable websites with you?

Start out with checking the website hacking tutorials and learn how a website functions. Learn SQL, PHP and Javascript and you will be able to find the vulnerabilities by yourself.

[yxzy]

No, i mean like tell me what the exploit is and how to fix it. And by this i meant the ones that often are overlooked, and i dont see too many fixes to exploits. Ill change "Show" To "Tell"
Sorry, i should of been more specific.

[Faner]

Basically there isn't too much to fix, just admins need to keep stuff up to date, and hacker won't find any public exploits for the website. Well, if hacker is smarter, and not some kind of skid, then he can try to find vulnerability in application's code (if application is open source). And from this there are very few ways to protect...
Also, as Anima Templi said, you should learn sql, php and javascript to understand what's the cause of vulnerability, so you will be able to fix it. If you'll ask where to learn it, I'd say that the best way to learn it is reading any good book about it and developing some sort of web project. For example most of my php and mysql experience I got while working on old web online game. Even though I gave it up after about 2 weeks, still knowledge gained in those 14 days is very useful.

[The Real Slim Shady]

No, i mean like tell me what the exploit is and how to fix it. And by this i meant the ones that often are overlooked, and i dont see too many fixes to exploits. Ill change "Show" To "Tell"
Sorry, i should of been more specific.

Most vulnerabilities found in websites are generally caused by

a) poor programming practices
b) poor server configuration

or a combination of these 2 factors. Thus in order to fix these problems, and secure your site, you need to understand what constitutes insecure programming, and how to properly secure your server.

Just listing potentially overlooked vulnerabilities is pointless... cause we cant list ALL the possible points of attack. And a good hacker would be capable of finding the ones we didnt list for you lol

So learn to program, and how your operating system works. Read articles on server security, etc. Cause really you need to know everything. If hackers know your system better than you do, youre going to get owned no matter what you try to do.