Match each attack with its definition.

The attacker executes code in the underlying data store by means of a web form

The attacker leaves some code in a blog comment that is later on executed by the victim's browser

The attacker executes code in the underlying operating system by modifying the URL of a request

The attacker steals the user's credentials by eavesdropping on a clear text communication channel and impersonates him$/$her

The victim is lured into visiting a web site that reuses a victim's session to a legitimate site to perform a request on the user's behalf