About

An attack where malicious SQL statements are provided as input data, exploiting security vulnerabilities in the client. This allows an attacker to bypass authentication and access controls.

This OWASP article gives a great explanation, and links to further references: https://www.owasp.org/index.php/SQL_injection

history | excerpt history