An attack where malicious SQL statements are provided as input data, exploiting security vulnerabilities in the client. This allows an attacker to bypass authentication and access controls.

This OWASP article gives a great explanation, and links to further references: https://www.owasp.org/index.php/SQL_injection