Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Exam 312-50v12 All Questions
Exam 312-50v12 All Questions

View all questions & answers for the 312-50v12 exam

ECCouncil CEH v12 312-50v12 Question # 148 Topic 15 Discussion

312-50v12 Exam Topic 15 Question 148 Discussion:
Question #: 148
Topic #: 15

Suppose that you test an application for the SQL injection vulnerability. You know that the backend database

is based on Microsoft SQL Server. In the login/password form, you enter the following credentials:

Username: attack' or 1=1 -

Password: 123456

Based on the above credentials, which of the following SQL commands are you expecting to be executed by the server, if there is indeed an SQL injection vulnerability?


A.

select * from Users where UserName = 'attack'' or 1=1 -- and UserPassword = '123456'


B.

select * from Users where UserName = 'attack' or 1=1 -- and UserPassword = '123456'


C.

select * from Users where UserName = 'attack or 1=1 -- and UserPassword = '123456'


D.

select * from Users where UserName = 'attack' or 1=1 --' and UserPassword = '123456'


Get Premium 312-50v12 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.