37Which web attack is possible due to a lack of input validation? Cross-site request forgery Extraneous files SQL injection Clickjacking

Which web attack is possible due to a lack of input validation? SQL injection Extraneous files Clickjacking Cross-site request forgery

34Which web attack is a server-side attack? Cross-site scripting Clickjacking Cross-site request forgery SQL injection

Which of the following is a common vulnerability in web applications? Cross-site scripting (XSS) Cross-site request forgery (CSRF) SQL injection All of the above

What type of attack involves injecting malicious code into a website to hijack a session cookie?Cross-site scripting (XSS) attacksPassword attacksPing flood attacksSQL injections

All injection attacks are successful because the web application fails to properly sanitize user input. What do we mean when we say that input needs to be sanitized (i.e., what is a web application that is sanitizing input doing?)