|1. Structured Query Language (SQL) is used by organizations to manipulate, store and retrieve data. SQL injection abuses the interaction between the organization’s application and the organization’s database to modify the database to achieve unintended results.
2. SQL injection attacks, in their most basic form, are methods of abusing an application’s interaction with its back-end database. These attacks leverage non-validated inputs to modify existing database queries to achieve unintended results and frequently target web applications.
Source: (Verizon, 2016)