Question

In which of the following attacks does an attacker inject an additional malicious query into an original query to make the dbms execute multiple sql queries?

a. illegal/logically incorrect query
b. piggybacked query
c. system stored procedure
d. tautology

Answer 1

A piggybacked query is a type of SQL injection attack where an additional malicious query is inserted into an original query, allowing the attacker to manipulate the database.

Step-by-step explanation:

The attack in which an attacker injects an additional malicious query into an original query to make the database management system (DBMS) execute multiple SQL queries is known as a piggybacked query. This type of attack is a form of SQL injection where the attacker exploits vulnerabilities in an application's software to insert their own malicious SQL code. This code is then executed by the DBMS, potentially leading to unauthorized access to the database, data theft, or other malicious activities.