200-201 · Question #211
Which vulnerability type is used to read, write, or erase information from a database?
The correct answer is D. SQL injection. SQL injection is a type of cybersecurity vulnerability where an attacker inserts malicious SQL code into input fields or parameters of a web application, which is then executed by the database. This attack can manipulate the SQL queries sent to the database, allowing unauthorized
Question
Which vulnerability type is used to read, write, or erase information from a database?
Options
- Across-site scripting
- Bcross-site request forgery
- Cbuffer overflow
- DSQL injection
How the community answered
(44 responses)- A7% (3)
- B2% (1)
- C5% (2)
- D86% (38)
Explanation
SQL injection is a type of cybersecurity vulnerability where an attacker inserts malicious SQL code into input fields or parameters of a web application, which is then executed by the database. This attack can manipulate the SQL queries sent to the database, allowing unauthorized access to sensitive data, modification of database contents, or even deletion of data. SQL injection attacks exploit poor input validation or lack of parameterized queries in web applications that interact with databases, enabling attackers to execute arbitrary SQL commands and potentially gain control over the database.
Topics
Community Discussion
No community discussion yet for this question.