CAS-003 · Question #432
Given the following: Which of the following vulnerabilities is present in the above code snippet?
The correct answer is C. DOM-based injection. DOM-based injection: Document Object Model-based XSS attacks occur when the web application writes data to the DOM (document.url, document.location, document.referrer) without proper sanitization, allowing the hacker to inject malicious JavaScript code to the content on the
Question
Given the following:
Which of the following vulnerabilities is present in the above code snippet?
Options
- ADisclosure of database credential
- BSQL-based string concatenation
- CDOM-based injection
- DInformation disclosure in comments
How the community answered
(29 responses)- A10% (3)
- B3% (1)
- C83% (24)
- D3% (1)
Explanation
DOM-based injection: Document Object Model-based XSS attacks occur when the web application writes data to the DOM (document.url, document.location, document.referrer) without proper sanitization, allowing the hacker to inject malicious JavaScript code to the content on the
Topics
Community Discussion
No community discussion yet for this question.