Web-application Security

To facilitate the management of sensors, the University deploys a Web Server allowing to register a new sensor, to monitor the status of existing sensors. The server is deployed as a virtual machine in the Azure infrastructure managed by the University. Networking only allows access to this server from machines located within the local network of the University. The server is based on a Ubuntu, with an Apache 2 server, running a MySQL database managed by PhP scripts.
Describe a method to analyse the security of this server.