CO3517 Types of Vuln Quiz

Read each scenario and determine the most likely type of vulnerability present.

• SQL Injection

• A web application allows users to enter their city name in a search bar. When a user enters "London'; DROP TABLE users; --", the application's database is completely wiped clean.

• Unrestricted File Upload/Remote Code Exe

• • A web application allows users to upload files. It checks the file's extension but doesn't validate the file's content. An attacker uploads a PHP script disguised as an image, and the script is executed on the server.

• Phishing/Broken Authentication

• A company's employee clicks on a link in an email that appears to be from their bank. The link leads to a fake website that asks for their login credentials. The employee enters their username and password, which are then stolen.

Answer explanation

SQL Injection: The attacker used SQL injection to manipulate the database query and delete the users table.

Phishing/Broken Authentication: The attacker tricked the employee into giving up their credentials through a phishing attack. This is a weakness in authentication.

Unrestricted File Upload/Remote Code Execution: The application didn't validate the file's content, allowing the attacker to upload and execute a malicious script.

An application uses a third-party library that has a known vulnerability. The developers are unaware of the vulnerability and don't apply the available patch. What type of vulnerability is this?

• Security Misconfiguration

• Phishing/Broken Authentication

• Vulnerable and Outdated Components

Answer explanation

Vulnerable and Outdated Components: The application is using a known vulnerable library, which could be exploited.

A company does not log failed login attempts. An attacker uses a brute force attack to guess user passwords and gains access to the system. What kind of exploit is this?

A web application allows users to directly access files on the server by manipulating the URL. An attacker accesses sensitive configuration files. Which vulnerability type is this?

• Cryptographic Failure

• Security Misconfiguration

• Local File Inclusion/Broken Access Control:

Answer explanation

Local File Inclusion/Broken Access Control: The application allowed unauthorized access to local files through URL manipulation.

A server administrator leaves the default password for a database account, allowing unauthorized access. This is a(n) ___________ vulnerability.

Answer explanation

Security Misconfiguration

An application allocates a fixed-size buffer for user input, but fails to check the input length, allowing attackers to overwrite adjacent memory locations. This is a(n) ​ (a)   vulnerability.

• Buffer Overflow
• Cryptographic Failures
• Security Misconfiguration
• Cross-Site Scripting (XSS)

Answer explanation

Buffer Overflow

Match the following vulnerabilities with their corresponding descriptions:

• A program writes beyond the allocated

• Security Misconfiguration

• A system uses default passwords

• XSS

• An attacker manipulates database queries

• Buffer Overflow

• An attacker injects malicious scripts in

• SQL Injection