Q: If an attacker submits multiple input parameters (query string, post data, cookies, etc) of the same name, the application may react in unexpected ways and open up new avenues of server-side and client-side exploitation. This is the premise of which of the following?
-
A
HTTP Parameter Pollution
-
B
Distortion
-
C
Parameter Busting
-
D
Session Splitting
A
Answer:
A
Explanation:
The correct answer is:
HTTP Parameter Pollution
Explanation: HTTP Parameter Pollution (HPP) occurs when an attacker submits multiple input parameters with the same name (e.g., in the query string, POST data, or cookies). This can lead to unexpected behavior in the application, including overwriting values, misinterpreting input, or exposing vulnerabilities that can be exploited on both the server-side and client-side. It often causes issues like bypassing input validation, leading to security risks.
Related Topic:
Share Above MCQ