nerdexam
GAQM

CPEH-001 · Question #988

CPEH-001 Question #988: Real Exam Question with Answer & Explanation

The correct answer is D. A Server-side includes injection. See the full explanation below for the reasoning.

Question

Calvin, a software developer, uses a feature that helps him auto-generate the content of a web page without manual involvement and is integrated with SSI directives. This leads to a vulnerability in the developed web application as this feature accepts remote user inputs and uses them on the page. Hackers can exploit this feature and pass malicious SSI directives as input values to perform malicious activities such as modifying and erasing server files. What is the type of injection attack Calvin's web application is susceptible to?

Options

  • AQserver-side template injection
  • BServer-side JS injection
  • CCRLF injection
  • DA Server-side includes injection

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice