I am looking for some open source/free vulnerable JAVA based applications. It can be web application, desktop application or any other. I need them to do some experiments in my research work. They could be very small or medium size but it's nice if it is like real world application.
The vulnerability may include XSS attack, accessing unauthorized data, sql-injuction etc.
I already tried OWASP applications but need some more.
Could somebody please suggest where can I find such vulnerable/exploitable java applications ?