An organization recently suffered from a web-application attack that resulted in stolen user session cookie information. The attacker was able to obtain the information when a user's browser executed a script upon visiting a compromised website. What type of attack MOST likely occurred?

Question

Yahya Ozer · Accepted Answer

Cross-Site Scripting (XSS)

Yahya Ozer · Answer

Extensible Markup Language (XML) external entities

Yahya Ozer · Answer

SQL injection (SQLI)

Yahya Ozer · Answer

Cross-Site Request Forgery (CSRF)

Question list

List of questions

Question 1

(1)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 1299 - CISSP discussion

Suggested answer: A

0 comments