nerdexam
CompTIA

CAS-003 · Question #432

Given the following: Which of the following vulnerabilities is present in the above code snippet?

The correct answer is C. DOM-based injection. DOM-based injection: Document Object Model-based XSS attacks occur when the web application writes data to the DOM (document.url, document.location, document.referrer) without proper sanitization, allowing the hacker to inject malicious JavaScript code to the content on the

Technical Integration of Enterprise Security

Question

Given the following:

Which of the following vulnerabilities is present in the above code snippet?

Options

  • ADisclosure of database credential
  • BSQL-based string concatenation
  • CDOM-based injection
  • DInformation disclosure in comments

How the community answered

(29 responses)
  • A
    10% (3)
  • B
    3% (1)
  • C
    83% (24)
  • D
    3% (1)

Explanation

DOM-based injection: Document Object Model-based XSS attacks occur when the web application writes data to the DOM (document.url, document.location, document.referrer) without proper sanitization, allowing the hacker to inject malicious JavaScript code to the content on the

Topics

#DOM-based XSS#code vulnerability#injection#web application security

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice