Exam SY0-601 topic 1 question 416 discussion

UNION = SQLi

SELECT X FROM X D. SQLi

Never heard of this before...again this came from Pentest+ "Union Query SQL Injection This type of injection builds two or more SELECT() statements that already exist within the application to create a single result in the application response. This is often useful in getting information from parts of the database that are not designed to be exposed to part of the application that allows user interaction. To perform a successful UNION attack, both queries must return the same number of columns and the data types in each column have to match. Another way is to use NULLs in a UNION SELECT statement until you have enough to match the queries and the error condition stops." -Pentest+ All-in-one Certification PT0-002 by Heather Linn & Raymond Nutting

if there is some new to this world will find this material really usefuf https://portswigger.net/web-security/sql-injection/union-attacks https://portswigger.net/web-security/sql-injection/cheat-sheet after i see the web site above i change my mind to sql

D- SELECT statement gives it away

In my humble opinion, it pertains to "web security vulnerabilities" so (B) CSRF

SQLi stands for SQL Injection. It is a type of web application attack that exploits vulnerabilities in the way a web application communicates with its back-end database.

UNION ALL SELECT is the key word

D -SQLi

This is clearly a SQL injection.

D -SQLi