What technique is used to perform a Connection Stream Parameter Pollution (CSPP) attack?

CSPP works by injecting parameters into a database connection string using semicolons, which many drivers use as parameter separators. This allows an attacker to override existing parameters such as credentials or server targets, or inject unauthorized values. The attack targets the parsing logic of the connection string handler, not the HTTP layer or JavaScript engine.

Inserting malicious JavaScript into input parameters describes Cross-Site Scripting (XSS), a completely different attack category targeting client-side execution.

Setting a session identifier to a known value describes a session fixation attack, not a connection string manipulation technique.

Submitting multiple HTTP parameters with the same name describes HTTP Parameter Pollution (HPP), which targets web application parameter parsing, not database connection strings.