SQL Injection

From BCMpedia. A Wiki Glossary for Business Continuity Management (BCM) and Disaster Recovery (DR).
Jump to navigation Jump to search
1. Structured Query Language (SQL) is used by organizations to manipulate, store and retrieve data. SQL injection abuses the interaction between the organization’s application and the organization’s database to modify the database to achieve unintended results.









(Source: Business Continuity Management Institute - BCM Institute)

 

2. SQL injection attacks, in their most basic form, are methods of abusing an application’s interaction with its back-end database. These attacks leverage non-validated inputs to modify existing database queries to achieve unintended results and frequently target web applications.
Source: (Verizon, 2016)