Automated discovery of parameter pollution vulnerabilities in web applications