Which one of the following statements best describes a command injection attack?

Which one of the following statements best describes a command injection attack?
A . The goal of a command injection attack is to exfiltrate data on the web server’s operating system via a vulnerable web application.
B . The goal of a command injection attack is to execute arbitrary commands on the mail server.
C . The user enters arbitrary commands on the web server’s OS via a vulnerable web application.
D . The goal of a command injection attack is to execute arbitrary commands on the web server’s OS via a vulnerable web application.

View Answer

Answer: D