Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil ECSS Exam - Topic 9 Question 120 Discussion

Melanie, a professional hacker, is attempting to break into a target network through an application server. In this process, she identified a logic flaw in the target web application that provided visibility into the source code. She exploited this vulnerability to launch further attacks on the target web application.Which of the web application vulnerabilities was identified by Melanie in the above scenario?
B) Security misconfiguration
A) Insecure deserialization
C) Command injection
D) Broken authentication

Eccouncil ECSS Exam - Topic 9 Question 120 Discussion

Actual exam question for Eccouncil's ECSS exam
Question #: 120
Topic #: 9
[All ECSS Questions]

Melanie, a professional hacker, is attempting to break into a target network through an application server. In this process, she identified a logic flaw in the target web application that provided visibility into the source code. She exploited this vulnerability to launch further attacks on the target web application.

Which of the web application vulnerabilities was identified by Melanie in the above scenario?

Show Suggested Answer Hide Answer
Suggested Answer: B

Melanie discovered alogic flawin the target web application that allowed her to view thesource code. This flaw indicates asecurity misconfiguration, which can lead to further attacks.Security misconfigurations occur when an application or system is not properly configured, leaving it vulnerable to exploitation.Reference: EC-Council Certified Security Specialist (E|CSS) documents and study guide12.


by Glory at May 13, 2026, 01:12 AM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Glory
5 hours ago
Sounds like a classic case of insecure deserialization.
upvoted 0 times
...
Latricia
5 days ago
Broken authentication seems off here; I feel like the focus is more on the logic flaw and code exposure. Could it really be security misconfiguration?
upvoted 0 times
...
Andree
11 days ago
Command injection sounds familiar, but I don't recall it being about source code visibility. This one's tricky!
upvoted 0 times
...
Carey
16 days ago
I remember a practice question about security misconfiguration that involved exposing source code. That could be it, right?
upvoted 0 times
...
Carri
2 months ago
I think this might be related to insecure deserialization, but I'm not entirely sure how that connects to the source code visibility.
upvoted 0 times
...

Save Cancel