medium
Single Answer
0

Jill is conducting a penetration test and uses the following query against a vulnerable web application. What data will she see if it succeeds? SELECT * FROM users WHERE category = 'customers' OR 1=1-- '

Answer Options

A

A list of all customers

B

A list of all customers whose userID is 1 or larger

C

A list of all customers whose userID is 1

D

A list of all users

Correct Answer: D

Explanation

If this query is successful, it will match all categories because it looks for categories that match customers or TRUE which is how OR 1=1 resolves. That means that any category will match, providing Jill with a list of all users, not just all customers or customers with specific userIDs.