Câu 50: GCIH: GIAC Certified Incident Handler

An attacker has determined a web application is running the SQL command shown below. What could she enter for VALUE to get a list of all email addresses in the employee table and avoid syntax errors? select email from employee where name = `˜[VALUE]';

1. A. ' or 1=1;--
2. B. ' or select email from employee
3. C. or select email from employee
4. D. or 1=1 — đáp án hiện tại