Ravi Sir's Cyber Security Cards › Interview Cards
In exam/interview English, describe SQLi risk without a working payload string:
In exam/interview English, describe SQLi risk without a working payload string: A. Paste a full real-world exploit chain B. Say a crafted input can change the WHERE clause logic when concatenated into SQL C. Refuse to discuss SQLi at all D. Claim SQLi is fixed by emoji B. Say a crafted input can cha
Read card text
What this card says
Options
A. Paste a full real-world exploit chain
B. Say a crafted input can change the WHERE clause logic when concatenated into SQL
C. Refuse to discuss SQLi at all
D. Claim SQLi is fixed by emoji
Correct answer
B. Say a crafted input can change the WHERE clause logic when concatenated into SQL
Why
You can explain the risk safely by saying crafted input can change the WHERE clause logic when the app builds SQL from strings, without giving a working payload.
Learn more in the lesson: 48.7 CEH-Style Practice Questions – Set B (Modules 11–20)