ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ15

VerifiedDatabase Penetration Testing Methodology

Veronica, a penetration tester at a top MNC company, is attempting to breach the company's database as part of SQLi penetration testing. She started using SQLi techniques to test the database security level. She inserted new database commands into the SQL statement and appended a SQL Server EXECUTE command to the vulnerable SQL statements.

Which SQLi technique was used to attack the database?

Explanation

Code injection inserts additional SQL statements or database commands into a vulnerable SQL statement. In SQL Server, EXECUTE can run a command string or a stored procedure, so appending an EXECUTE command is code injection.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!