Exam 312-50v11 topic 1 question 294 discussion

Actual exam question from ECCouncil's 312-50v11

Question #: 294
Topic #: 1

A company's Web development team has become aware of a certain type of security vulnerability in their Web software. To mitigate the possibility of this vulnerability being exploited, the team wants to modify the software requirements to disallow users from entering HTML as input into their Web application.
What kind of Web application vulnerability likely exists in their software?

A. Cross-site scripting vulnerability
B. SQL injection vulnerability
C. Web site defacement vulnerability
D. Gross-site Request Forgery vulnerability

Show Suggested Answer

Suggested Answer: A 🗳️

by ANDRESCB1988 at July 23, 2021, 6:37 a.m.

Comments

Submit Cancel

qwerty100

10 months, 1 week ago

Selected Answer: A

A. Cross-site scripting vulnerability

upvoted 1 times

...

MH2

1 year, 3 months ago

Selected Answer: A

Cross-Site Scripting (XSS) Attacks: In this method, an attacker injects HTML tags or scripts into a target website. CEHv11 pg1027

upvoted 1 times

...

pjdw

1 year, 9 months ago

Gross-site

upvoted 2 times

...

Daniel8660

2 years, 3 months ago

Selected Answer: A

Web Application Threats - A7 Cross-Site Scripting (XSS) Attacks Cross-site scripting (XSS or CSS) attacks exploit vulnerabilities in dynamically generated web pages, which enables malicious attackers to inject client-side script into web pages viewed by other users.It occurs when unvalidated input data is included in dynamic content that is sent to a user's web browser for rendering.Attackers inject malicious JavaScript, VBScript, ActiveX, HTML, or Flash for execution on a victim's system by hiding it within legitimate requests. (P.1775/1759)

upvoted 4 times

...

egz21

3 years ago

correct!!

upvoted 2 times

...

ANDRESCB1988

3 years, 5 months ago

correct

upvoted 2 times

...