- Which type of vulnerability is an attack that injects malicious scripts into web pages to redirect users to fake websites or gather personal information?
Cross-Site Scripting (XSS) allows attackers to execute scripts in the victim's browser, allowing them to hijack user sessions or redirect the user to a malicious site.
- What is the technique where an attacker inserts SQL database commands into a data input field of an order form used by a web-based application?
SQL injection is a technique that is used to steal data by taking advantage of a nonvalidated input vulnerability. Basically, it is a code injection technique where an attacker executes malicious SQL queries that control a web application’s database.
You want to prevent your browser from running JavaScript commands that are potentially...
