Vulnerabilities and Attacks

Question 1

Zero Day Vulnerability

Answer 1

Vulnerability that is discovered and exploited before a patch can be issued for it

“Vulnerability exists but manufacturer does not know about it.”

Question 2

Zero Day Exploit

Answer 2

Any unknown exploit in the wild that exposes a previously unknown vulnerability in software or hardware.

Question 3

Code injection

Answer 3

Insertion of additional information or code through a data input form from a client to an application

Question 4

Attackers conduct SQL injections by

Answer 4

• Entering data on a form
• Modifying cookies
• Changing POST data
• Using HTTp headers