SQL injection

SQL injection is a web application attack technique where an attacker exploits a vulnerability in a web application's database layer. By manipulating user-supplied input, an attacker can inject malicious SQL code into a web application's database query. Successful SQL injection attacks can enable unauthorized access to databases, data exfiltration, or manipulation of data.