Question: Consider the following script that builds an SQL query using text entered by a user: SELECT emaillist FROM table WHERE email = 'Semail. a) What
Consider the following script that builds an SQL query using text entered by a user: "SELECT emaillist FROM table WHERE email = 'Semail"". a) What happens if the user inserts myname@myorg.net' (3 Marks) b) How can the attacker determine from the web response of the previous input (i.e., mynameamyorg.net ') if this website is vulnerable for SOL interiection or not? (4 Marks) c) What happens if the user enters x' OR 'x' = 'x, in the case the targeted website is vulnerable to SQL injection and in the case it filters and encodes all input data (4 Marks) d) What should the attacker write to (4 Marks): a. delete the entire table b. Add a new email address (1.e., Jone213@yahoo.com) to list
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
