Multiple choice technology security

Give the name of the vulnerability resides in the below code: 1 <% 2 if(null==resultArr) 3 { 4 %> 5 6 Your Search for '<%=request.getParameter("searchID")%>' has not returned any records 7 8 <% 9 } 10 %>

  1. Information Leakage

  2. Cross Site Scripting

  3. Cross Site Tracing

  4. Option 1 AND Option 2

  5. Option 1 AND Option 3

  6. Command Injection

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Line 6 directly outputs the 'searchID' parameter from the request without HTML encoding, allowing XSS injection (attacker can craft malicious searchID). The commented text also leaks implementation details (developer name, date, logic flow) which is information leakage. Both vulnerabilities coexist.