What attack was indicated when the IDS system picked up the following text coming from the Internet to the web server? select user, password from user where user= "jdoe" and password= `myp@55!'…

The correct answer is C. SQL Injection. An example of manipulating SQL statements to perform SQL injection includes using the semi- colon to perform multiple queries. The following example would delete the users table: Username: ` or 1=1; drop table users; - - Password: [Anything]

Perimeter Security and Intrusion Detection

Question

What attack was indicated when the IDS system picked up the following text coming from the Internet to the web server? select user, password from user where user= "jdoe" and password= `myp@55!' union select "text",2 into outfile "/tmp/file1.txt" - - '

Options

ARemote File Inclusion
BURL Directory Traversal
CSQL Injection
DBinary Code in HTTP Headers

How the community answered

(42 responses)

B
2% (1)
C
93% (39)
D
5% (2)

Explanation

An example of manipulating SQL statements to perform SQL injection includes using the semi- colon to perform multiple queries. The following example would delete the users table: Username: ` or 1=1; drop table users; - - Password: [Anything]

Topics

#SQL injection#web application attack#IDS detection#attack recognition

Community Discussion

No community discussion yet for this question.

Full GCED Practice