A Tester Who Is Performing a Penetration Test on a Website

question 59

Multiple Choice

A tester who is performing a penetration test on a website receives the following output: Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in /var/www/search.php on line 62 Which of the following commands can be used to further attack the website?

• A) <script>var adr= '../evil.php?test=' + escape(document.cookie);</script>
• B) ../../../../../../../../../../etc/passwd
• C) /var/www/html/index.php;whoami
• D) 1 UNION SELECT 1, DATABASE(),3--

---

Definitions:

Free-rider Problem

A situation in which some individuals consume more than their fair share of a public resource, or shoulder less than a fair share of the costs of its production, without contributing to its provision.

Market Failure

A situation where the allocation of goods and services by a free market is not efficient, often leading to a net social welfare loss.

Pollution

The introduction of harmful substances or products into the environment, leading to adverse effects on human health, ecosystems, or buildings.

Deadweight Loss

The decline in economic productivity that happens when a good or service does not reach or cannot reach its equilibrium.