EC-Council
EC0-350 · Question #682
Kevin has been asked to write a short program to gather user input for a web application. He likes to keep his code neat and simple. He chooses to use printf(str) where he should have ideally used…
The correct answer is C. Format String Attack. See the full explanation below for the reasoning.
Question
Kevin has been asked to write a short program to gather user input for a web application. He likes to keep his code neat and simple. He chooses to use printf(str) where he should have ideally used printf(?s? str). What attack will his program expose the web application to?
Options
- ACross Site Scripting
- BSQL injection Attack
- CFormat String Attack
- DUnicode Traversal Attack
How the community answered
(57 responses)- A4% (2)
- B7% (4)
- C75% (43)
- D14% (8)
Community Discussion
No community discussion yet for this question.