nerdexam
GAQM

CPEH-001 · Question #373

While testing the company's web applications, a tester attempts to insert the following test script into the search area on the company's web site: <script>alert(" Testing Testing Testing…

The correct answer is D. Cross-site scripting. See the full explanation below for the reasoning.

Question

While testing the company's web applications, a tester attempts to insert the following test script into the search area on the company's web site:

<script>alert(" Testing Testing Testing ")</script> Afterwards, when the tester presses the search button, a pop-up box appears on the screen with the text:

"Testing Testing Testing". Which vulnerability has been detected in the web application?

Options

  • ABuffer overflow
  • BCross-site request forgery
  • CDistributed denial of service
  • DCross-site scripting

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    14% (3)
  • C
    5% (1)
  • D
    76% (16)

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice