Web Application Threats include which type of vulnerabilities?

Web Application Threats include which type of vulnerabilities?

• A. Cross-Site Scripting
• B. Buffer Overflow
• C. Injection Flaws
• D. Phishing

Answer: (C)

Untrusted input processed by a web application as part of a command or query leads to injection flaws. This vulnerability class happens when the app takes user-provided data and uses it in a way that the interpreter or database executes, allowing attackers to run unintended commands, access or modify data, or bypass authentication. Injection flaws cover the common attack methods like SQL injection and command injection, making them a primary concern for web app security. The other options don’t describe the typical web app weaknesses: a buffer overflow is a memory-safety issue from lower-level software, phishing is social engineering, and while Cross-Site Scripting is a web vulnerability, injection flaws is the broad category that captures these input-based threats.

Untrusted input processed by a web application as part of a command or query leads to injection flaws. This vulnerability class happens when the app takes user-provided data and uses it in a way that the interpreter or database executes, allowing attackers to run unintended commands, access or modify data, or bypass authentication. Injection flaws cover the common attack methods like SQL injection and command injection, making them a primary concern for web app security. The other options don’t describe the typical web app weaknesses: a buffer overflow is a memory-safety issue from lower-level software, phishing is social engineering, and while Cross-Site Scripting is a web vulnerability, injection flaws is the broad category that captures these input-based threats.