ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 267 - SY0-601 discussion

Report
Export

A security analyst reviews web server logs and notices the following line:

104.35. 45.53 -

[22/May/2020:07 : 00:58 +0100] "GET . UNION ALL SELECT

user login, user _ pass, user email from wp users—— HTTP/I.I" 200 1072 http://www.example.com/wordpress/wp—admin/

Which of the following vulnerabilities is the attacker trying to exploit?

A.
SSRF
Answers
A.
SSRF
B.
CSRF
Answers
B.
CSRF
C.
xss
Answers
C.
xss
D.
SQLi
Answers
D.
SQLi
Suggested answer: D

Explanation:

SQLi stands for SQL injection, which is a type of web security vulnerability that allows an attacker to execute malicious SQL statements on a database server. SQLi can result in data theft, data corruption, denial of service, or remote code execution.

The attacker in the web server log is trying to exploit a SQLi vulnerability by sending a malicious GET request that contains a UNION ALL SELECT statement. This statement is used to combine the results of two or more SELECT queries into a single result set. The attacker is attempting to retrieve user login, user pass, and user email from the wp users table, which is a WordPress database table that stores user information. The attacker may use this information to compromise the WordPress site or the users’ accounts.

asked 02/10/2024
Vijay Khara
43 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first