CompTIA
JK0-018 · Question #492
After visiting a website, a user receives an email thanking them for a purchase which they did not request. Upon investigation the security administrator sees the following source code in a pop-up…
The correct answer is C. XSRF. See the full explanation below for the reasoning.
Question
After visiting a website, a user receives an email thanking them for a purchase which they did not request. Upon investigation the security administrator sees the following source code in a pop-up window:
<HTML> <body onload="document.getElementByID('badForm').submit()"> <form id="badForm" action="shoppingsite.company.com/purchase.php" method="post" <input name="Perform Purchase" value="Perform Purchase" /> </form></body></HTML> Which of the following has MOST likely occurred?Options
- ASQL injection
- BCookie stealing
- CXSRF
- DXSS
How the community answered
(59 responses)- A7% (4)
- B3% (2)
- C76% (45)
- D14% (8)
Community Discussion
No community discussion yet for this question.