Exploiting query parameters is an example of what attack?

Exploiting query parameters is an example of what attack?

• A. SQL Injection
• B. Cross Site Scripting
• C. Buffer Overflow
• D. DoS

Answer: (A)

Exploiting query parameters targets SQL injection. When a web app takes data from a URL or form input and directly inserts it into a database query without proper validation or parameterization, an attacker can inject malicious SQL through that parameter. This can alter the meaning of the query, allowing access to data, bypassing authentication, or changing data in the database. That’s what makes this vulnerability SQL injection. Cross-Site Scripting involves injecting code that runs in a victim’s browser, not manipulating a database query. A buffer overflow relates to writing beyond memory bounds in certain languages, and a DoS aims to overwhelm a service to make it unavailable. To defend against SQL injection, use parameterized queries or prepared statements, validate inputs, and apply least-privilege database access.

Exploiting query parameters targets SQL injection. When a web app takes data from a URL or form input and directly inserts it into a database query without proper validation or parameterization, an attacker can inject malicious SQL through that parameter. This can alter the meaning of the query, allowing access to data, bypassing authentication, or changing data in the database. That’s what makes this vulnerability SQL injection.

Cross-Site Scripting involves injecting code that runs in a victim’s browser, not manipulating a database query. A buffer overflow relates to writing beyond memory bounds in certain languages, and a DoS aims to overwhelm a service to make it unavailable. To defend against SQL injection, use parameterized queries or prepared statements, validate inputs, and apply least-privilege database access.