Big rewards are available for hackers who can spot when websites have got their coding wrong.