Question

A Web site that allows users to enter text, such as a comment or a name, and then stores it and later display it to other users, is potentially vulnerable to a kind of attack called a ___________________ attack.

(a) Two-factor authentication

(b) Cross-site request forgery

(c) Cross-site scripting

(d) Cross-site scoring scripting

I have been asked this question in examination.

My query is from Application Security in chapter Database Programming Techniques of Database Management

Answer 1

The correct option is (c) Cross-site scripting

The explanation is: In such an attack, a malicious user enters code written in a client-side scripting language such as JavaScript or Flash instead of entering a valid name or comment.