nerdexam
EC-Council

EC0-350 · Question #316

While testing the company's web applications, a tester attempts to insert the following test script into the search area on the company's web site. <script>alert(" Testing Testing Testing…

The correct answer is D. Cross-site scripting. See the full explanation below for the reasoning.

Question

While testing the company's web applications, a tester attempts to insert the following test script into the search area on the company's web site. <script>alert(" Testing Testing Testing ")</script> Afterwards, when the tester presses the search button, a pop-up box appears on the screen with the text:

"Testing Testing Testing". Which vulnerability has been detected in the web application?

Options

  • ABuffer overflow
  • BCross-site request forgery
  • CDistributed denial of service
  • DCross-site scripting

How the community answered

(42 responses)
  • A
    2% (1)
  • B
    5% (2)
  • C
    17% (7)
  • D
    76% (32)

Community Discussion

No community discussion yet for this question.

Full EC0-350 Practice