In today¿s world, Cyber security has become an important leap in the form of jobs, education. But the reality is that only a few are aware of the major web vulnerabilities. Some statistical studies show that small scale industries are directly and indirectly connected to the world of the internet, but they are not aware of the major web vulnerabilities of their web application. Since website hosting has become common nowadays, most of the web applications are prone to attacks and malicious attacks of web applications. Assessing and avoiding these vulnerabilities require deep knowledge of these vulnerabilities. There are numerous online scanners available on the Internet that provides only paid limited service. The tools are made in a way that it can only operate in command line interface or in any programming language. So it is a difficult task for a normal person to operate the scanners without previous knowledge. This paper presents a vulnerability scanner that scans the website and detects specific vulnerabilities, along with its location and solution. The vulnerabilities that the scanner considers are: SQL injection, cross site scripting.