Secure Application Development Quiz

What is the attack technique used to exploit web sites by altering backend database queries through inputting manipulated queries?

What happens when an application takes user-inputted data and sends it to a web browser without proper validation and escaping?

Which attack can execute scripts in the user's browser and is capable of hijacking user sessions, defacing websites, or redirecting the user to malicious sites?

What threat are you vulnerable to if you do not validate authorization of user for direct references to restricted resources?

In which of the following exploits does an attacker insert malicious code into a link that appears to be from a trustworthy source?

Input validation should be based on....

Taking control of admin functionality and misusing sensitive data that they are unauthorized to access is:

User A and User B belong to same access level in an application, However User A is able to view credit card information of User B. This is classic example of

XSS stands for _________________

In which of the following exploits does an attacker add SQL code to an application input form to gain access to resources or make changes to data?