This is Vulnerable Web Application developed for course by Cyber Security and Privacy Foundation (www.cysecurity.org) for Java programmers
Get the VulnerableSpring Project from here: https://github.com/breakthesec/VulnerableSpring
https://www.udemy.com/hacking-securing-java-web-programming/
http://sourceforge.net/projects/javavulnerablelab/files/v0.1/JavaVulnerableLab.ova/download