Which type of attack involves injecting malicious SQL

Solution

SQL Injection is a web application attack where an attacker injects malicious SQL code into a query, allowing them to access, modify, or delete database data without proper authorization. For example, an attacker might append malicious SQL commands to a web form input, manipulating the SQL query and potentially retrieving sensitive information or corrupting the database. SQL Injection remains one of the most common vulnerabilities in poorly secured web applications. Option A is incorrect because DDoS attacks involve overwhelming a server with traffic, not injecting SQL code. Option B is incorrect since XSS involves injecting malicious scripts into web pages, not SQL code into databases. Option D is incorrect because Brute Force Attacks involve guessing passwords, not SQL manipulation. Option E is incorrect since Man-in-the-Middle (MitM) attacks involve intercepting communications between two parties, not injecting SQL commands into a database.