A threat actor accesses a list of user email addresses by sending database commands through an insecure login page. What type of attack is this?

Dec 21, 2022 Last Updated: Dec 21, 2022 No Comments

IT Questions Bank › Category: CyberOps Associate › A threat actor accesses a list of user email addresses by sending database commands through an insecure login page. What type of attack is this?

A threat actor accesses a list of user email addresses by sending database commands through an insecure login page. What type of attack is this?

cross-site scripting
client-side scripting
iFrame attack
SQL injection

Explanation: SQL injection occurs when a threat actor sends SQL database commands into an insecure login field.

Exam with this question: 17.2.8 Check Your Understanding - Network Services Attacks