--- title: "ass01-security-audit" aliases: tags: - assignment - comp210 --- Jet Hughes - 9474308 # Summary of system - function - technology # Flaws ## Password policy - must have at least 5 characters and one digit. - not suffiecient ## SQL Injection - can log in to admin using username: " 'or 1=1;--" - we are able to extract data which is displayed as the users username - ## Javascript Injection ## Path traversal ## Network-Level security ## Other