Exam 312-50v13 topic 1 question 76 discussion

Actual exam question from ECCouncil's 312-50v13

Question #: 76
Topic #: 1

Judy created a forum. One day, she discovers that a user is posting strange images without writing comments. She immediately calls a security expert, who discovers that the following code is hidden behind those images:

What issue occurred for the users who clicked on the image?

A. This php file silently executes the code and grabs the user’s session cookie and session ID.
B. The code redirects the user to another site.
C. The code injects a new cookie to the browser.
D. The code is a virus that is attempting to gather the user’s username and password.

Show Suggested Answer

Suggested Answer: A 🗳️

by NikoTomas at March 12, 2025, 10:22 p.m.

Comments

Submit Cancel

e30b32d

1 month, 2 weeks ago

Selected Answer: A

A. This PHP file silently executes the code and grabs the user’s session cookie and session ID.

upvoted 1 times

...

NikoTomas

3 months, 3 weeks ago

Selected Answer: A

The JavaScript code writes clickable link to the web page (document.write()). The created link poiting to the .php script uses parameter "cookie" with user's current cookie (read by document.cookie function). This is how user's cookie can be sent to the attacker and hijacked user's session.

upvoted 1 times

...