A security test performed on one of the applications shows that user input is not validated. Which security vulnerability is the application more susceptible to because of this lack of validation?

The correct answer is D. SQL injection. An application that does not validate user input is particularly susceptible to SQL injection attacks. In an SQL injection attack, an attacker can insert or "inject" a SQL query via the input data from the client to the application. Due to the lack of validation, the malicious…

Submitted by joshua94· Mar 30, 2026Application Security

Question

Options

Adenial-of-service
Bcross-site request forgery
Cman-in-the-middle
DSQL injection

How the community answered

(35 responses)

A
3% (1)
B
6% (2)
D
91% (32)

Explanation

An application that does not validate user input is particularly susceptible to SQL injection attacks. In an SQL injection attack, an attacker can insert or "inject" a SQL query via the input data from the client to the application. Due to the lack of validation, the malicious SQL commands are executed by the database server, leading to unauthorized access or manipulation of the

Topics

#Web application security#Input validation#SQL injection

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice