What type of attacks take advantage of vulnerabilities in poorly coded web application software to introduce malicious program code into a company’s systems and networks.

SQL Injection

Explanation:

Coding a web application that uses a database is requiring close attention, where the developer closes any loophole any attacker may later want to exploit when the application is deployed. SQL Injection is a type of attack where the attacker places malicious code in the query statements through the form. This is possible if the input is not properly sanitized and cleaned.

it can either be 2. or 4. : ) tell me if i'm wrong or right