Câu 12: NSE5_FWB_AD-8.0: Fortinet NSE 5 - FortiWeb 8.0 Administrator

While reviewing FortiWeb logs, you notice a suspicious login request that failed authentication. You suspect it may be part of an injection attack targeting the login form. Which input pattern is an example of a typical SQL injection attempt that could bypass authentication checks?

1. A. document.location='/steal?cookie='+document.cookie
2. B. SELECT username FROM accounts WHERE username='admin';-- ' AND password='password'; — đáp án hiện tại
3. C. '||(SELECT password FROM users WHERE role='admin')||'
4. D. select(ALL USERS);