Which of the following system attack methods is executed by entering malicious code into the search box of a vulnerable website, causing the server to reveal restricted information?

A man-in-the-middle attack intercepts communication between two parties, but it typically doesn't involve entering malicious code into a website's search box to exploit a database.

A Denial of Service (DoS) attack aims to make a service unavailable to legitimate users by overwhelming it, not by injecting code into a search box to reveal information.

SQL injection occurs when an attacker inserts malicious SQL code into input fields (like a search box) of a web application. This causes the application's backend database to execute unintended queries, potentially revealing, modifying, or deleting sensitive data, or even granting unauthorized access.

Cross-site scripting (XSS) involves injecting malicious client-side scripts into web pages viewed by other users, primarily affecting the user's browser, not directly causing the server to reveal its own restricted database information.