The system can be exposed by weak credentials (such as a weak password), failing to verify unauthorized access or even inadequate data validation.