Web Application Security Flashcards
1
Q
How do injection vulnerabilities work?
A
the attacker tricks victim application into executing code
designed by the attacker.
2
Q
What is SQL injection?
A
3
Q
What is cross-side scripting (XSS)?
A
4
Q
What is code injection?
A
5
Q
Why are network firewalls not as helpful for web application security
A
6
Q
What are the components of a web stack? (4)
A
- Operating system
- Server-side scripting language
- Web server
- Database
7
Q
What is the difference between stored and reflected XXS?
A
8
Q
What is the general rue for protecting against injection attacks?
A
Never trust user-provided input data
9
Q
A
