PHSCDC itocdc-2015-www issues

PHSCDC / itocdc-2015-www

An insecure PHP web app for the Iowa State University 2015 IT Olympics Cyber Defense Competition (ITOCDC)

MIT License

0 stars 1 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Checking Description

#19 BEASTLYMONKEY27 closed 9 years ago
1
Proper User Input

#18 BEASTLYMONKEY27 closed 9 years ago
3
Comment on filesize is incorrect; measured in bytes rather than purported kilobytes

#17 jummy0 closed 9 years ago
0
Accounts may be created with the same email or username as an existing account

#16 jummy0 closed 9 years ago
2
User Cookie Security

#15 BEASTLYMONKEY27 closed 9 years ago
2
Users may only stay logged in for an hour at a time

#14 jummy0 closed 9 years ago
3
User registration does not require a username

#13 jummy0 closed 9 years ago
1
Password confirmation field in registration doesn't actually check for identical passwords

#12 jummy0 closed 9 years ago
1
Use newer hashes in session authentication

#11 ngiddings closed 9 years ago
2
High risk of SQL injection

#10 ngiddings closed 9 years ago
2
Logout button will not always work

#9 ngiddings closed 9 years ago
2
Password security requirements

#8 ngiddings closed 9 years ago
1
Make a more robust video view counter

#7 ngiddings opened 9 years ago
2
Is the DB always properly closed?

#6 ngiddings closed 9 years ago
3
Database query limitations

#5 ngiddings closed 9 years ago
1
Shortname generation algorithm

#4 ngiddings closed 9 years ago
3
The database stores everything in plain text.

#3 majiru closed 9 years ago
2
Config.php contains sensative data

#2 majiru closed 9 years ago
0
Fake authorization

#1 ngiddings closed 9 years ago
6