GWAPT · Question #125
Which of the following is a common indicator of a SQL injection vulnerability?
The correct answer is A. Error messages displaying database information. Error messages that expose database details - table names, column names, SQL syntax errors, or stack traces - are a classic sign of SQL injection vulnerability, because unsanitized input is being passed directly to the database engine, which then surfaces internal errors to the…
Question
Which of the following is a common indicator of a SQL injection vulnerability?
Options
- AError messages displaying database information
- BSlow application response times
- CA missing Content-Security-Policy header
- DDirectory listing enabled
How the community answered
(32 responses)- A78% (25)
- B13% (4)
- C3% (1)
- D6% (2)
Explanation
Error messages that expose database details - table names, column names, SQL syntax errors, or stack traces - are a classic sign of SQL injection vulnerability, because unsanitized input is being passed directly to the database engine, which then surfaces internal errors to the user. Slow response times (B) can indicate many issues like network latency or inefficient queries, but are not specific to SQL injection. A missing Content-Security-Policy header (C) relates to XSS (Cross-Site Scripting) mitigation, not SQL injection. Directory listing (D) is a web server misconfiguration that exposes file structure, unrelated to database interaction.
Memory tip: Think "SQL injection = database talks back." When a database error message leaks through to the UI, it means user input reached the query engine unfiltered - that's the tell.
Community Discussion
No community discussion yet for this question.