Recent questions and answers in OWASP Top 10 Vulnerabilities

0 votes

Client-side scripts can be allowed to execute in the browsers for needed operations.

answered Feb 13, 2022 in OWASP Top 10 Vulnerabilities by SakshiSharma (30.7k points)

0 votes

Which attack can execute scripts in the user’s browser and is capable of hijacking user sessions, defacing websites or redirecting the user to malicious sites?

answered Feb 13, 2022 in OWASP Top 10 Vulnerabilities by SakshiSharma (30.7k points)

0 votes

Which of the following are most likely to result in insecure cryptography?

answered Feb 13, 2022 in OWASP Top 10 Vulnerabilities by SakshiSharma (30.7k points)

0 votes

What is an attack that exploits the trust a site has in a user’s browser?

answered Feb 13, 2022 in OWASP Top 10 Vulnerabilities by SakshiSharma (30.7k points)

0 votes

Role-based access control helps prevent which OWASP Top 10 vulnerability?

answered Feb 13, 2022 in OWASP Top 10 Vulnerabilities by SakshiSharma (30.7k points)

0 votes

What happens when an application takes user inputted data and sends it to a web browser, without proper validation?

answered Feb 13, 2022 in OWASP Top 10 Vulnerabilities by SakshiSharma (30.7k points)

0 votes

What is an attack that forces a user’s session credential or session ID to an explicit value?

answered Feb 13, 2022 in OWASP Top 10 Vulnerabilities by SakshiSharma (30.7k points)

0 votes

Which of the following languages are the primary targets of cross-site scripting?

answered Feb 13, 2022 in OWASP Top 10 Vulnerabilities by SakshiSharma (30.7k points)

0 votes

What is an example of a session-related vulnerability?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

0 votes

Which threat can be prevented by having unique usernames generated with a high degree of entropy?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

0 votes

For a connection that changes from HTTP to HTTPS, what flaw arises if you do not change the session identifier?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

0 votes

What threat arises from not flagging HTTP cookies with tokens, as secure?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

0 votes

What attack can be prevented by links or forms that invoke state-changing functions with an unpredictable token for each user?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

0 votes

Which of the following actions should you take to verify the implementation of a web application?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

0 votes

Which of the following are the best ways to implement transport layer protection?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

0 votes

In which of the following scenarios should you use the escaping technique?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

0 votes

What happens when an application takes user inputted data, and sends it to a web browser without proper validation and escaping?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

0 votes

Which of the following depict the typical impact of failure to restrict URL access?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

0 votes

What is the attack technique used to exploit websites by altering the backend database queries through inputting manipulated queries?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

0 votes

What flaw arises from session tokens having poor randomness across a range of values?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

0 votes

Which of the following consequences are most likely to occur due to an injection attack?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

0 votes

Which of the following are the best ways to protect against injection attacks?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

0 votes

What type of flaw occurs when untrusted user-entered data is sent to the interpreter as part of a query or command?

answered Feb 12, 2022 in OWASP Top 10 Vulnerabilities by DavidAnderson (7.4k points)

Help get things started by asking a question.

...