While testing the company's web applications, a tester attempts to insert the following test script into the search area on the company's web site:
<script>alert(" Testing Testing Testing ")</script> Afterwards, when the tester presses the search button, a pop-up box appears on the screen with the text:
"Testing Testing Testing". Which vulnerability has been detected in the web application?

Question

While testing the company's web applications, a tester attempts to insert the following test script into the search area on the company's web site:

"Testing Testing Testing". Which vulnerability has been detected in the web application?

Accepted Answer

D. Cross-site scripting Cross-site scripting occurs when a web application echoes user-supplied input back to the browser without proper encoding or sanitization, allowing embedded scripts to execute. The alert popup appearing after the script tag was submitted proves the application rendered the input as executable JavaScript rather than as plain text. This is a reflected XSS variant triggered by the search function.

Answer

A. Buffer overflow Buffer overflow involves writing data past the boundaries of an allocated memory buffer in an application, which is unrelated to client-side script injection in a browser.

Answer

B. Cross-site request forgery Cross-site request forgery tricks an authenticated user's browser into sending unintended state-changing requests to a trusted site, and does not involve injecting scripts through input fields.

Answer

C. Distributed denial of service Distributed denial of service overwhelms a target with traffic from many sources to cause unavailability, which is entirely unrelated to script injection in a web form.

While testing the company's web applications, a tester attempts to insert the following test script into the search area on the company's web site: <script>alert(" Testing Testing Testing…

Question

Options

How the community answered

Why each option

Topics

Community Discussion