Multiple choice technology testing

Select the threat category for the below request-response Web Request - http://www.somesite.com/page.asp?pageid=10&lang=en&title=Section%20Title Response -

Section Title

  1. SQL Injection

  2. Cross Site Scripting

  3. Authentication

  4. Forceful browsing
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

The response contains an HTML h1 element with the title parameter from the URL echoed directly into the page. This unencoded reflection allows script injection, which is a reflected XSS vulnerability.

Keep practicing — related questions