A web application is configured to target browsers and allow access to bank accounts to siphon money to a foreign account. This is an example of which of the following attacks?

SQL injection targets the application's database by inserting malicious SQL statements into input fields, aiming to extract or manipulate data from the backend, not primarily to execute code within a user's browser to siphon money.

Header manipulation involves altering HTTP request or response headers to bypass security controls, trick servers, or mislead users, but it does not directly describe the injection of malicious scripts into a web page that executes in the user's browser.

Cross-site scripting (XSS) involves an attacker injecting malicious client-side scripts into web pages viewed by other users. When a victim's browser executes these scripts, the attacker can access sensitive information like cookies or session tokens, hijack user sessions, or perform unauthorized actions on behalf of the user, such as transferring funds from bank accounts.

Flash cookie exploitation specifically targets vulnerabilities related to Adobe Flash Player's Local Shared Objects (Flash cookies), which is a deprecated technology and does not encompass the broader mechanism of injecting and executing arbitrary client-side scripts in a browser to control user actions.