Skip to main content

An attack where malicious SQL statements are provided as input data, exploiting security vulnerabilities in the client. This allows an attacker to bypass authentication and access controls.

This OWASP article gives a great explanation, and links to further references: https://www.owasp.org/index.php/SQL_injection