quartz/content/notes/ass01-security-audit.md

title	aliases	tags
ass01-security-audit		assignment comp210

Jet Hughes - 9474308

Summary of system

• function
• technology

Flaws

Password policy

• must have at least 5 characters and one digit.
  • not suffiecient

SQL Injection

• can log in to admin using username: " 'or 1=1;--"
• we are able to extract data which is displayed as the users username

Javascript Injection

Path traversal

Network-Level security

Other