A Linux-based e-commerce platform is prone to XSS and SQL injection attacks. Step 1: Scanning with OWASP ZAP OWASP ZAP identifies an SQL injection vulnerability in the login page.

Although 'gremlin' and 'cobolt' were SQL injection types that execute invalid queries, there are also types of enemies that parse correct passwords using blind SQL injection.