Structured Query Language (SQL) Injection Attack: A type of cyber-attack that exploits vulnerabilities in a website’s database by injecting malicious SQL code. It is used to gain unauthorized access to sensitive data, modify or delete it, or create new user accounts with elevated privileges. Examples of SQL injection attacks include inserting a malicious query into a login form to bypass authentication or inserting a malicious query into a database query to extract sensitive information.
Categories: CC D5: Security Operations | CCSP D4: Cloud Application Security | CISM D4: Incident Management | CISSP D7: Security Operations | Security+ D2: Threats Vulnerabilities and Mitigations | SSCP D3: Risk Identification Monitoring and Analysis
« Back to Glossary Index