What’s the effect of malicious file execution on the server?
-
User account compromised
-
Steal user sessions
-
Site defacement and complete take over of the application
-
Complete user account compromise
Malicious file execution allows attackers to run arbitrary code on the server. This most severely leads to site defacement and complete application takeover (C) as the attacker gains server-level access. User account compromise (A, D) and session theft (B) are possible but less severe than full server control.
Malicious file execution (e.g., remote/local file inclusion vulnerabilities) lets an attacker get arbitrary code to run on the server itself, which can lead to defacing the site's content and taking full control of the application — a far more severe outcome than just stealing a session or a single user's credentials, which are client/account-level compromises rather than full server takeover.