Study. uk . com
  1. Home
  2. All questions
  3. Question 467

CompTIA Security+ study material · question 467 of 611

What is the most serious outcome of SQL injection when the database account is over-privileged?

  1. Denial of service on the database
  2. Cross-site scripting in the results page
  3. Session fixation on the application
  4. Command execution on the database host
Show the answer

Answer: D. Command execution on the database host

Injection can read arbitrary tables and bypass authentication, and with sufficient privileges reach the host itself.

Source: OWASP SQL Injection Prevention Cheat Sheet (OWASP) — OWASP SQL Injection Prevention Cheat Sheet › Introduction

Challenge yourself on this topic → Study as cards