Web Application Security Contest - Vulnerabilities

[sthalkidis () yahoo com]

Hello,

I have published a list of vulnerabilities for the three applications at the contest page.
http://java.uom.gr/~halkidis. Furthermore, I have included a secure version of the first two applications. 
Unfortunately my AppScan license has expired and I can not automatically test it for vulnerabilities.

Thank you all,

Spyros Halkidis

-------------------------------------------------------------------------
This List Sponsored by: SpiDynamics

ALERT: "How A Hacker Launches A Web Application Attack!" 
Step-by-Step - SPI Dynamics White Paper
Learn how to defend against Web Application Attacks with real-world 
examples of recent hacking methods such as: SQL Injection, Cross Site 
Scripting and Parameter Manipulation

https://download.spidynamics.com/1/ad/web.asp?Campaign_ID=701300000003gRl
--------------------------------------------------------------------------