A Tester Who Is Performing a Penetration Test on a Website

question 59

Multiple Choice

A tester who is performing a penetration test on a website receives the following output: Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in /var/www/search.php on line 62 Which of the following commands can be used to further attack the website?

• A) <script>var adr= '../evil.php?test=' + escape(document.cookie);</script>
• B) ../../../../../../../../../../etc/passwd
• C) /var/www/html/index.php;whoami
• D) 1 UNION SELECT 1, DATABASE(),3--

---

Definitions:

Shareholder Proposal

A suggestion submitted by a shareholder about a broad company policy or procedure.

Shareholders' Meeting

A gathering of the shareholders of a company where decisions regarding the company's policies, management, and financial matters are discussed and voted upon.

Duty of Loyalty

An obligation of individuals in fiduciary positions to act in the best interests of their company or clients.

Ethically Allowed

Actions or decisions that are permitted based on moral or ethical principles.