37Which web attack is possible due to a lack of input validation? SQL injection Extraneous files Clickjacking Cross-site request forgery

The web attack that is possible due to a lack of input validation is SQL injection.

Explanation

1. SQL Injection: This occurs when an attacker is able to manipulate an application's SQL queries by injecting malicious input. If input validation is not implemented, unsafe data is allowed to interact with the database, potentially leading to unauthorized data access or manipulation.

2. Extraneous Files: This term generally refers to the security risks associated with the exposure of unnecessary files on a server, not directly linked to input validation.

3. Clickjacking: This attack tricks users into clicking on something different from what they perceive, usually involving transparent overlays. It does not primarily rely on input validation.

4. Cross-Site Request Forgery (CSRF): While this is a significant web security threat, it primarily exploits the user's authenticated session rather than a lack of input validation.

Final Answer

SQL injection is the web attack possible due to a lack of input validation.