Question

What kind of attack allows for the construction of LDAP statements based on user input statements, which can then be used to access the LDAP database or modify the database's information?

Answer 1

LDAP injection

Step-by-step explanation:

LDAP injection is a kind of assault on a web application where hackers place code in a client input field with the aim of gaining unauthorized access in to the system or retrieve information.

At the point when a web application doesn't satisfactorily sanitize client provided input, hackers might have the option to change the construction of a LDAP statement which will run with similar permissions that executed the command.