CFR-310 Exam QuestionsBrowse all questions from this exam

CFR-310 Exam - Question 56


A company website was hacked via the following SQL query:

email, passwd, login_id, full_name

FROM members -

WHERE email = “[email protected]”; DROP TABLE members; –”

Which of the following did the hackers perform?

Show Answer
Correct Answer:

Discussion

1 comment
Sign in to comment
044f354Option: B
Sep 29, 2024

B. Deleted the entire members table Explanation: The SQL query contains a SQL injection attack, where the attacker inserted a malicious SQL command: DROP TABLE members;. This command is designed to delete the entire members table in the database. The injected SQL command after WHERE email = “[email protected]” includes a semicolon (;), which terminates the original query and allows the DROP TABLE command to be executed, effectively deleting the entire members table.