I am working with online institute, the developer team has got different applications which are based on the following technologies:
All are web based applications
Build either on .NET framework 1.1 or .NET Framework 2.0
SQL server as a database at the backend
None of them are active directory enabled.
What security issue i have to take in consideration
