medium
Single Answer
0Jill is conducting a penetration test and uses the following query against a vulnerable web application. What data will she see if it succeeds? SELECT * FROM users WHERE category = 'customers' OR 1=1-- '
Answer Options
A
A list of all customers
B
A list of all customers whose userID is 1 or larger
C
A list of all customers whose userID is 1
D
A list of all users
Correct Answer: D
Explanation
If this query is successful, it will match all categories because it looks for categories that match customers or TRUE which is how OR 1=1 resolves. That means that any category will match, providing Jill with a list of all users, not just all customers or customers with specific userIDs.