SQL Injection: A method of attack where an attacker inserts or manipulates SQL queries through user input fields to execute unauthorized SQL commands. This is a critical security concern in databases, as it can lead to unauthorized access, data retrieval, or data manipulation. Examples include using SQL code in login forms to bypass authentication or in search forms to access private data.
Categories: CC D5: Security Operations | CCSP D4: Cloud Application Security | CISM D4: Incident Management | CISSP D7: Security Operations | Security+ D2: Threats Vulnerabilities and Mitigations | SSCP D7: Systems and Application Security
« Back to Glossary Index