Exam 312-50v12 topic 1 question 60 discussion

Actual exam question from ECCouncil's 312-50v12

Question #: 60
Topic #: 1

While testing a web application in development, you notice that the web server does not properly ignore the “dot dot slash” (../) character string and instead returns the file listing of a folder higher up in the folder structure of the server.
What kind of attack is possible in this scenario?

A. Cross-site scripting
B. SQL injection
C. Denial of service
D. Directory traversal

Show Suggested Answer

Suggested Answer: D 🗳️

by eli117 at April 4, 2023, 6:16 p.m.

Comments

Submit Cancel

insaniunt

5 months, 4 weeks ago

Selected Answer: D

In directory traversal attacks, attackers use the dot-dot-slash (../) sequence to access restricted directories outside the web server’s root directory. Attackers can use the trial-and-error method to navigate outside the root directory and access sensitive information in the system.

upvoted 3 times

...

sudowhoami

7 months, 2 weeks ago

Selected Answer: D

Exam Hint ../ = Directory Traversal

upvoted 2 times

...

581777a

10 months, 1 week ago

Selected Answer: D

D. Directory traversal

upvoted 2 times

...

Danieluuqo

1 year, 1 month ago

Selected Answer: D

The answer is D

upvoted 2 times

...

eli117

1 year, 2 months ago

Selected Answer: D

D. Directory traversal In a directory traversal attack, an attacker can access files and directories that are stored outside of the web root directory. The attacker can exploit this vulnerability to access sensitive information such as configuration files, password files, and other sensitive data.

upvoted 3 times

...