Which vulnerability allows an attacker to manipulate backend SQL database queries by inputting untrusted payload text into input fields?
ACross-Site Request Forgery (CSRF)
BSQL Injection (SQLi)
CBuffer Overflow
DPhishing
Explanation
SQL Injection occurs when unvalidated user input is directly concatenated into SQL queries. Prepared Statements (Parameterized Queries) are the primary defense against SQLi.
Exam Relevance
- Topic: Cybersecurity & Cryptography
- Subtopic: Web Application Security
No Comments