<a href="https://www.company.com/payto.do?

A forensics investigator is examining a number of unauthorized payments that were reported on the company’s website. Some unusual log entries show users received an email for an unwanted mailing attempt to unsubscribe.

One of the users reported the email to the phishing team, and the forwarded email revealed the link to be:

<a href="https://www.company.com/payto.do?

routing=00001111&acct=22223334&amount=250">Click here to unsubscribe</a>

Which of the following will the forensics investigator MOST likely determine has occurred?
A . SQL injection
B . CSRF
C . XSS
D . XSRF

View Answer

Answer: B