A Tester Who Is Performing a Penetration Test on a Website

question 59

Multiple Choice

A tester who is performing a penetration test on a website receives the following output: Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in /var/www/search.php on line 62 Which of the following commands can be used to further attack the website?

• A) <script>var adr= '../evil.php?test=' + escape(document.cookie);</script>
• B) ../../../../../../../../../../etc/passwd
• C) /var/www/html/index.php;whoami
• D) 1 UNION SELECT 1, DATABASE(),3--

---

Definitions:

Home Apnea Monitor

A device used in the home setting to monitor the breathing and heart rate of infants at risk for apnea, providing an alert if abnormal patterns are detected.

Anaphylactic Reaction

A severe, life-threatening allergic response that manifests rapidly and requires immediate medical intervention.

Epinephrine

A hormone and medication, also known as adrenaline, that increases heart rate, muscle strength, blood pressure, and sugar metabolism, used in treating allergic reactions and asthma attacks.