The SQL Injection

 

SQL Injection

Structured Query Language (SQL) is a database language to control data in a database. Since its inception, SQL has steadily found its way into many open source databases. SQL injection (SQLi) is a type of cybersecurity attack that targets these databases using crafted SQL statements to hack the systems into doing unexpected or unpredictable things.

A successful attacker may compromise the target include:
  • Bypassing login
  • Exfiltrating/stealing data
  • Modifying or corrupting data
  • Deleting data
  • Running arbitrary code