Vulnerabilities that include untrusted data interpreted and executed as commands.

Vulnerabilities that include untrusted data interpreted and executed as commands.

• A. Injection flaws
• B. Vulnerability stack
• C. SOAP
• D. RESTful

Answer: (A)

Vulnerability called injection flaws arise when untrusted data is passed to an interpreter as part of a command or query, causing that interpreter to execute unintended commands. This happens because the input isn’t properly validated or escaped, so the attacker’s data gets treated as code rather than as harmless input. The result can be unauthorized data access, data modification, or full system control. Examples include SQL injection, OS command injection, and other injections that target different interpreters. The other options don’t describe this pattern. A term like vulnerability stack isn’t a standard description of a vulnerability type, and SOAP or RESTful refer to web service protocols and architectural styles rather than specific vulnerability classes.

Vulnerability called injection flaws arise when untrusted data is passed to an interpreter as part of a command or query, causing that interpreter to execute unintended commands. This happens because the input isn’t properly validated or escaped, so the attacker’s data gets treated as code rather than as harmless input. The result can be unauthorized data access, data modification, or full system control. Examples include SQL injection, OS command injection, and other injections that target different interpreters.

The other options don’t describe this pattern. A term like vulnerability stack isn’t a standard description of a vulnerability type, and SOAP or RESTful refer to web service protocols and architectural styles rather than specific vulnerability classes.