SQL Injection
Structured Query Language (SQL) is a database language to control data in a database. Since its inception, SQL has steadily found its way into many open source databases. SQL injection (SQLi) is a type of cybersecurity attack that targets these databases using crafted SQL statements to hack the systems into doing unexpected or unpredictable things.A successful attacker may compromise the target include:
- Bypassing login
- Exfiltrating/stealing data
- Modifying or corrupting data
- Deleting data
- Running arbitrary code