> a basic, updated Ubuntu Server LAMP stack with a MySQL database After just apt-get'ing that, the system is of course always vulnerable to the next as-of-yet-

> a basic, updated Ubuntu Server LAMP stack with a MySQL database After just apt-get'ing that, the system is of course always vulnerable to the next as-of-yet-undisclosed 0day vulnerability in the base software. As soon as you start adding useful scripts of the "P" variety (as in "LAMP") then you are at the mercy of those scripts not having any vulnerabilities. If you wrote those scripts yourself, then yes, xss, sqli, rfi etc are all issues you need to consider. The OWASP pages could be a useful place to start getting a feeling of the most common pitfalls.