Skip to content

Glossary: Application and Credential Attacks, and AI Risks

injection

Also written: injection attack

An attack where the attacker types input that the application treats as part of a command instead of as plain data, which changes what the command does.

Where the book teaches it

Related terms

SQL injectioncommand injectioncross-site scripting (XSS)LDAP injectionXML injectionmemory injectionprompt injection