Question

A web application security analyst is reviewing access logs for an e-commerce site and finds the following request: GET /products.php?id=5+UNION+SELECT+username,password,email+FROM+users-- HTTP/1.1 (200 response, 4KB larger than typical product pages). What type of attack does this most likely represent, and what is the attacker's goal?

Accepted Answer

A SQL injection attack using a UNION query to extract credential data from a different database table

Answer

A cross-site scripting attack injecting a script to steal user session cookies

Answer

A command injection attack executing operating system commands on the web server

Answer

A directory traversal attack attempting to read files outside the web root