312-49 · Question #8
Injection flaws are web application vulnerabilities that allow untrusted data to be Interpreted and executed as part of a command or query. Attackers exploit injection flaws by constructing malicious
The correct answer is A. SQL Injection. SQL Injection is a web application injection flaw where attackers insert malicious SQL statements into input fields, which are then interpreted and executed by the database. This can result in unauthorized data access, modification, or deletion. Password brute force is a credenti
Question
Injection flaws are web application vulnerabilities that allow untrusted data to be Interpreted and executed as part of a command or query. Attackers exploit injection flaws by constructing malicious commands or queries that result in data loss or corruption, lack of accountability, or denial of access. Which of the following injection flaws involves the injection of malicious code through a web application?
Options
- ASQL Injection
- BPassword brute force
- CNmap Scanning
- DFootprinting
How the community answered
(47 responses)- A91% (43)
- B4% (2)
- C2% (1)
- D2% (1)
Explanation
SQL Injection is a web application injection flaw where attackers insert malicious SQL statements into input fields, which are then interpreted and executed by the database. This can result in unauthorized data access, modification, or deletion. Password brute force is a credential attack, Nmap scanning is a reconnaissance tool, and footprinting is an information-gathering technique - none of these are injection flaws that exploit a web application's query handling.
Topics
Community Discussion
No community discussion yet for this question.