Glossary: Application and Credential Attacks, and AI Risks

SQL injection

Also written: SQLi

An injection attack where input typed by the user changes a database query, letting an attacker read or change data they shouldn't reach. For example, entering `x' OR '1'='1` closes the quote early so the query returns every row. Parameterized queries prevent it.