Question: Consider the following script that builds an SQL query using text entered by a user: SELECT emaillist FROM table WHERE email = 'Semail. a) What

Consider the following script that builds an SQL query using text entered by a user: "SELECT emaillist FROM table WHERE email = 'Semail"". a) What happens if the user inserts myname@myorg.net' (3 Marks) b) How can the attacker determine from the web response of the previous input (i.e., mynameamyorg.net ') if this website is vulnerable for SOL interiection or not? (4 Marks) c) What happens if the user enters x' OR 'x' = 'x, in the case the targeted website is vulnerable to SQL injection and in the case it filters and encodes all input data (4 Marks) d) What should the attacker write to (4 Marks): a. delete the entire table b. Add a new email address (1.e., Jone213@yahoo.com) to list

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!