What type of cybersecurity vulnerability occurs when an application includes unsanitized user input directly inside a database query string?
Answer and explanation
Correct answer: A. SQL Injection (SQLi)
- Step 1: Identify the exploitation mechanism: manipulating database commands via malicious input.
- Step 2: SQL Injection occurs when user input containing SQL metacharacters (e.g., `' OR '1'='1`) is directly concatenated into database queries without parameterized statements or input sanitization.
Answer
SQL Injection (SQLi).
Why not the others: XSS injects malicious client-side scripts into web pages viewed by other users; Buffer overflow writes past memory bounds; DDoS floods network bandwidth.
Practise more Computer Systems, Networks and Cybersecurity.
Free questions with an explanation for every one, and full timed EmSAT Achieve (UAE) mock tests.
More Computer Systems, Networks and Cybersecurity questions
- What is the decimal equivalent of the hexadecimal number 2F₁₆?
- In computer architecture, which component of the central processing unit (CPU) directs system operations and manages the fetch-decode-execut…
- Which layer of the OSI reference model is responsible for end-to-end process-to-process communication, flow control, and error recovery usin…
- What is the 8-bit two's complement binary representation of the decimal integer -6?
- Which cryptographic algorithm is an asymmetric (public-key) cipher commonly used for secure key exchange and digital signatures?
- In Boolean algebra, what is the simplified equivalent of the expression NOT(A AND B) according to De Morgan's laws?