Question
Consider the following script that builds an SQL query using text entered by a user: SELECT emaillist FROM table WHERE email = 'Semail. a) What
Consider the following script that builds an SQL query using text entered by a user: "SELECT emaillist FROM table WHERE email = 'Semail"". a) What happens if the user inserts myname@myorg.net' (3 Marks) b) How can the attacker determine from the web response of the previous input (i.e., mynameamyorg.net ') if this website is vulnerable for SOL interiection or not? (4 Marks) c) What happens if the user enters x' OR 'x' = 'x, in the case the targeted website is vulnerable to SQL injection and in the case it filters and encodes all input data (4 Marks) d) What should the attacker write to (4 Marks): a. delete the entire table b. Add a new email address (1.e., Jone213@yahoo.com) to list
Step by Step Solution
There are 3 Steps involved in it
Step: 1
Get Instant Access to Expert-Tailored Solutions
See step-by-step solutions with expert insights and AI powered tools for academic success
Step: 2
Step: 3
Ace Your Homework with AI
Get the answers you need in no time with our AI-driven, step-by-step assistance
Get Started