An attacker submits a malformed input to crash the server.

An attacker uses an automated tool to brute force user passwords.

An attacker skips the payment step and proceeds directly to order confirmation.

An attacker intercepts requests to access unauthorized resources.