What is this type of attack (that can use either HTTP GET or HRRP POST) called?

Posted by: Pdfprep Category: 312-50v9 Tags: , ,

An attacker changes the profile information of a particular user on a target website (the victim). The attacker uses this string to update the victim’s profile to a text file and then submit the data to the attacker’s database.

<frame src=http://www/vulnweb.com/updataif.php Style=”display:none”></iframe>

What is this type of attack (that can use either HTTP GET or HRRP POST) called?
A . Cross-Site Request Forgery
B . Cross-Site Scripting
C . SQL Injection
D . Browser Hacking

Answer: A

Leave a Reply

Your email address will not be published.