Henderson has completed the pen testing tasks. He is now compiling the final report for the client. Henderson needs to include the result of scanning that revealed some SQL injection and cross-site…

Henderson has completed the pen testing tasks. He is now compiling the final report for the client. Henderson needs to include the result of scanning that revealed some SQL injection and cross-site scripting (XSS) queries that he used to bypass web application authentication. In which section of the pen testing report, should Henderson include this information?