Content is hidden
Lack of Password Confirmation
XML Injection
Business Logic Errors
Broken Access Control (BAC)
Email/Password Recovery Flaw
No Rate Limiting on Form
Authentication Bypass