When an order was submitted via the corporate website, an administrator noted special characters
(e.g., “;–” and “or 1=1 –”) were input instead of the expected letters and numbers. Which of the
following is the MOST likely reason for the unusual results?

A.
The user is attempting to highjack the web server session using an open-source browser.

B.
The user has been compromised by a cross-site scripting attack (XSS) and is part of a botnet
performing DDoS attacks.

C.
The user is attempting to fuzz the web server by entering foreign language characters which
are incompatible with the website.

D.
The user is sending malicious SQL injection strings in order to extract sensitive company or
customer data via the website.

Explanation: