GCIH · Question #218
Which of the following attacks allows an attacker to retrieve crucial information from a Web server's database?
The correct answer is C. SQL injection attack. SQL injection attacks manipulate backend database queries by inserting malicious SQL code into application input fields, enabling unauthorized retrieval or manipulation of database contents. The other options are either fictional or target different attack surfaces.
Question
Which of the following attacks allows an attacker to retrieve crucial information from a Web server's database?
Options
- ADatabase retrieval attack
- BPHP injection attack
- CSQL injection attack
- DServer data attack
How the community answered
(62 responses)- A2% (1)
- B3% (2)
- C94% (58)
- D2% (1)
Why each option
SQL injection attacks manipulate backend database queries by inserting malicious SQL code into application input fields, enabling unauthorized retrieval or manipulation of database contents. The other options are either fictional or target different attack surfaces.
Database retrieval attack is not a recognized or standardized attack category in any major security framework or vulnerability classification system.
PHP injection targets web server execution by injecting PHP code into the application layer, and is not specifically designed to retrieve database contents through SQL query manipulation.
SQL injection exploits insufficient input validation to inject malicious SQL statements into queries executed by the web server against its database, allowing attackers to read, modify, delete, or exfiltrate sensitive data. It directly targets the query execution layer between the web application and the database server, making it the primary technique for unauthorized database access via web applications.
Server data attack is not a defined or recognized attack technique in any standard security taxonomy.
Concept tested: SQL injection attack against web application databases
Source: https://owasp.org/www-community/attacks/SQL_Injection
Topics
Community Discussion
No community discussion yet for this question.