A Systematic Literature Review on the Characteristics and Effectiveness of Web Application Vulnerability Scanners