Vulnerable web application written in PHP/MySQL