User Input Threats

What is the definition of User Input? Fill in the blank: User Input is numbers, characters, a text string, or ________ that is provided by the user to a website.

• script code

• background image

• server address

• browser history

Which of the following is an example of user input?

• When a user fills in a form

• When a user logs in

• When a user adds a comment to a forum

• All of the above

Which of the following is NOT a type of attack that can occur when a website accepts user input?

• A) Directory Traversal

• B) Buffer Overflow

• C) Command Injection

• D) Phishing

Fill in the blank: ________ is an attack where an attacker tries to access directories and files stored outside the web root folder.

• Directory Traversal

• SQL Injection

• Cross-Site Scripting

• Session Fixation

Fill in the blank: ________ is an attack that occurs when more data is written to a buffer than it can hold.

• Buffer Overflow

• SQL Injection

• Cross-Site Scripting

• Phishing

Fill in the blank: ________ is an attack where malicious code is inserted into a website to be executed by other users (often abbreviated as XSS).

• Cross-Site Scripting

• SQL Injection

• Phishing

• Denial of Service

Based on the passage: Why is security often not considered a priority during the coding process?

• Most programmers are focused on making their application work and meeting their deadlines to publish the code.

• Security is always the main focus during coding.

• Programmers believe security is handled automatically by the computer.

• Security is only important after the application is released.

What is the main goal of a Directory Traversal attack?

• To delete files in the root folder

• To access files outside the permitted system space such as the root folder

• To create new folders

• To rename files

What tactic is used in a Directory Traversal attack to move up the file system tree?

• Insert a series of ../ characters into the URL or software code

• Use the rm command

• Use the mkdir command

• Insert a series of // characters

Fill in the blank: Typing 'cd ..' will move us from the current folder to its ______ folder.

• parent

• child

• root

• home