divide by zero, inaccurate discount and totals, reflection of user input git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@273 4033779f-a91e-0410-96ef-6bf7bf53c507
12 lines
540 B
HTML
12 lines
540 B
HTML
<div align="Center">
|
|
<p><b>Lesson Plan Title:</b> How to Discover Clues in the HTML </p>
|
|
</div>
|
|
|
|
<p><b>Concept / Topic To Teach:</b> </p>
|
|
<!-- Start Instructions -->
|
|
Developers are notorious for leaving statements like FIXME's, Code Broken, Hack, etc... inside the source code. Review the source code for any comments denoting passwords, backdoors, or something doesn't work right.
|
|
<!-- Stop Instructions -->
|
|
<br>
|
|
<p><b>General Goal(s):</b> </p>
|
|
The user should be able to bypass the authentication check.
|