EC-Council
412-79V10 · Question #232
You have carried out the last round of testing for your new website before it goes live. The website has many dynamic pages and connects to a SQL backend that authenticates and retrieves data in a…
The correct answer is B. Your website is vulnerable to XSS. See the full explanation below for the reasoning.
Question
You have carried out the last round of testing for your new website before it goes live. The website has many dynamic pages and connects to a SQL backend that authenticates and retrieves data in a database. You come across a web security site that recommends inputting the following code into a search field on web pages to check for vulnerabilities. code <script> alert ("hacked")</script> When you type this and click on search, you receive a pop-up window that says: hacked What is the result of this test?
Options
- AYour website is vulnerable to web bugs
- BYour website is vulnerable to XSS
- CYour website is not vulnerable
- DYour website is vulnerable to SQL injection
How the community answered
(24 responses)- A8% (2)
- B71% (17)
- C4% (1)
- D17% (4)
Community Discussion
No community discussion yet for this question.