This website contains three vulnerabilities: XSS, SQLi and iDOR. Your goal is to find an email me:

• How many user are registered in tis site
• What are credentials of each user (login and password)
• Inject an Alert script in the blog page