🎴 Flashcard Mode
Web Application Security Fundamentals
Card1 / 20
Mastered0
Review0
QuestionClick to flip
In which of the following exploits does an attacker insert malicious code into a link that appears to be from a trustworthy source?
AnswerClick to flip back
A
Cross-Site Scripting
💡 Explanation:
Cross-Site Scripting (XSS) attacks inject malicious scripts into web pages viewed by other users. The attacker crafts a malicious link that appears to come from a trusted source (the vulnerable website), and when victims click it, the script executes in their browsers with the site's permissions. Buffer overflows (B), command injection (C), and path traversal (D) are different vulnerability classes.