Many different common threats exist against web-exposed services and applications. One attack involves attempting to leverage input fields to execute queries in a nested fashion that is unintended by

The correct answer is A. Injection. Injection attacks - most commonly SQL injection - occur when an attacker supplies malicious input into a field (e.g., a form, URL parameter, or API call) that is then interpreted as a command or query by the backend system. 'Nested' or 'stacked' queries are a hallmark of SQL inje

Submitted by chen.hong· Apr 18, 2026Cloud Application Security

Question

Many different common threats exist against web-exposed services and applications. One attack involves attempting to leverage input fields to execute queries in a nested fashion that is unintended by the developers. What type of attack is this?

Options

AInjection
BMissing function-level access control
CCross-site scripting
DCross-site request forgery

How the community answered

(47 responses)

A
91% (43)
B
2% (1)
C
4% (2)
D
2% (1)

Explanation

Injection attacks - most commonly SQL injection - occur when an attacker supplies malicious input into a field (e.g., a form, URL parameter, or API call) that is then interpreted as a command or query by the backend system. 'Nested' or 'stacked' queries are a hallmark of SQL injection, where additional statements are appended to the original query to manipulate the database. This is distinct from CSRF (which exploits authenticated sessions), XSS (which targets the client browser), and missing function-level access control (which is a server-side authorization failure).

Topics

#Web application security#Injection attacks#SQL injection#Application threats

Community Discussion

No community discussion yet for this question.

Full CCSP Practice