1. A method for identifying stored security vulnerabilities in computer software applications, the method comprising: providing via a first interface of a computer software application during execution of the computer software application and using a processor, test data having a characteristic of a malicious payload; wherein an interaction performed with the first interface results in data written to a location within a persistent data store; and wherein an interaction performed with a second interface of the computer software application results in data read from the location within the persistent data store; and identifying a stored security vulnerability associated with the computer software application if the test data are written to the persistent data store at the location.