PWPP

TCM Security Practical Web Pentest Professional (PWPP)

SstiEnglish
Exam overview

Practice session

A Python Flask application renders user-supplied content using `render_template_string(user_input)`. An attacker submits `{{7*7}}` and the response contains `49`. What vulnerability exists?

Loading your practice session…