Look at this query:

'SELECT * FROM users WHERE username='' + username + ''';

What's the problem?

Which username input could bypass authentication?

sqlSELECT * FROM users WHERE username='...' AND password='...'

Look at this code:

int testScore = console.nextInt();

if (testScore >= 90)

What's missing?

Vulnerable XSS code:

const name = req.query.name;res.send(`<h1>Hello, ${name}!</h1>`);

The problem is: