Glossary: Attacks and Indicators
injection
Input that an application runs as code. Each kind is named after what runs the code: SQL injection (the database), command injection (the shell) and XSS (the browser).
Where the book teaches it
Related terms
SQL injectioncommand injectioncross-site scripting (XSS)parameterized query