312-92 · Question #39
What vulnerability is the following code susceptible to? CREATE OR REPLACE PROCEDURE demo (name in VARCHAR2) as cursor_name INTEGER; rows_processed INTEGER; sql VARCHAR2(150); code VARCHAR2(2); BEGIN
Sign in or unlock 312-92 to reveal the answer and full explanation for question #39. The question stem and answer options stay visible for context.
Question
What vulnerability is the following code susceptible to? CREATE OR REPLACE PROCEDURE demo (name in VARCHAR2) as cursor_name INTEGER; rows_processed INTEGER; sql VARCHAR2(150); code VARCHAR2(2); BEGIN ... sql := 'SELECT postal_code FROM states WHERE state_name = ''' || ''''; cursor_name := dbms_sql.open_cursor; DBMS_SQL.PARSE(cursor_name, sql, DBMS_SQL.NATIVE); DBMS_SQL.DEFINE_COLUMN(cursor_name, 1, code, 10); row_processed:= DMBS_SQL.EXECUTIVE(cursor_name); DBMS_SQL.CLOSE_CURSOR(cursor_name);
Options
- ASQL string manipulation
- BDBMS_Open string attacks
- COracle injection
- DSQL injection
Unlock 312-92 to see the answer
You've previewed enough free 312-92 questions. Unlock 312-92 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.