A penetration tester conducted an assessment on a web server. The logs from this session show the following: http://www.thecompanydomain.com/servicestatus.php?serviceID=892&serviceID=892 ' ; DROP TABLE SERVICES; -- Which of the following attacks is being attempted?
A) Clickjacking
B) Session hijacking
C) Parameter pollution
D) Cookie hijacking
E) Cross-site scripting

Question

Quizplus · Accepted Answer

The attack being attempted is SQL Injection, specifically a form of Parameter Pollution where the attacker tries to manipulate the SQL query by injecting malicious SQL code through the serviceID parameter.

A Penetration Tester Conducted an Assessment on a Web Server