Story Tag: database vulnerability assessment