Which type of threat occur when an attacker can send hostile data to an interpreter within an application?

The correct answer is D. Injection. Injection attacks occur when untrusted or malicious data is sent to an interpreter - such as a SQL engine, OS shell, LDAP parser, or XML parser - as part of a command or query. The interpreter executes the hostile data as if it were a legitimate instruction. Common examples…

Application Deployment and Security

Question

Options

ACross-site scripting
BSensitive data exposure
CBroken authentication
DInjection

How the community answered

(47 responses)

A
4% (2)
C
2% (1)
D
94% (44)

Explanation

Injection attacks occur when untrusted or malicious data is sent to an interpreter - such as a SQL engine, OS shell, LDAP parser, or XML parser - as part of a command or query. The interpreter executes the hostile data as if it were a legitimate instruction. Common examples include SQL injection, command injection, and LDAP injection. Cross-site scripting (A) targets browser-side script execution. Sensitive data exposure (B) is about inadequate protection of confidential data. Broken authentication (C) involves flaws in session or credential management. Injection (D) is the OWASP category that specifically describes this interpreter-based attack vector.

Topics

#Application Security#Injection Vulnerabilities#Web Security#Data Interpretation

Community Discussion

No community discussion yet for this question.

Full 200-901 Practice