Welcome to Vulnerable Next.js App
This is a deliberately vulnerable web application designed for security testing and educational purposes.
⚠️ WARNING: This application contains intentional security vulnerabilities. Do not deploy this in production environments!
Security Vulnerabilities
- SQL Injection
- Cross-Site Scripting (XSS)
- CSRF (Cross-Site Request Forgery)
- Path Traversal
- Weak Authentication
- Insecure File Upload
Testing Features
- User Registration & Login
- Product Search & Comments
- File Upload Functionality
- Admin Dashboard
- API Endpoints
How to Use
This application is designed for security professionals and developers to understand common web vulnerabilities.
- Start by registering a new user account
- Explore the different vulnerable features
- Try to exploit the vulnerabilities
- Learn how to fix these security issues
Educational Purpose
This application should only be used in controlled environments for educational purposes. Always follow responsible disclosure practices and never test vulnerabilities on systems you don't own.