Praetorian interview question

Was given a web application and had to identify XSS and SQLi bugs in it