- This app can be used to demonstrate the following vulnerabilities:
- SQL Injection
- XSS - Reflective and Persistent
- Path Traversal
It is an app where user can provide review for hotels. The business revolves around our personal contacts with food critics whose review comments and ratings are highly valued. The application login is on invite-only basis to food critics. Currently we have a venture capitalist investment, but with no income. The future of the business lies in attracting hotels once we have a successful database of reviews and ratings. These hotels would publish ads on our website in the future, and we shall thus earn revenue.
- So, there are 2 very critical assets for the business today:
- The fund from the venture capitalist
- The current database and relationship with food critics
You need docker installed in the machine.
After cloning the repo, you can run docker-compose up and that should set up the application.
