Quiz
Untitled
Questions in this quiz (1)
1
A hacker wants to gain access to a database behind a web site using SQL injection.
(i) Explain the purpose of each of the following injected code used by the hacker:
ORDER BY 1 -- followed by ' ORDER BY 2 --
UNION SELECT table_name FROM user_tables --
UNION SELECT column_name FROM user_tab_columns WHERE table_name ='CLIENTS' --
UNION SELECT carddetails FROM CLIENTS –- A1: The hacker is trying to determine how many columns are contained within the database, so he/she executes the command to test when the application will throw an error. If the application throws an error after say order by 4 that means the database has 3 columns.
- B2: This command is to determine how many tables are within the database.
- C3: This query will give column name, and the list all user tab columns where the table ends with or contains the column named CLIENTS.
- D4: The hacker is querying for list of carddetails from the previous found column CLIENTS
Information
- Description
- Quiz on Untitled, created by Geri Ray on 03/05/2019.
- Author
- Geri Ray
- Language
- English
- Views
- 0
- Rating
- No ratings yet Rate this quiz