Glossary: Vulnerability Management and Monitoring

SQL injection

Also written: CWE-89, injection

A flaw where input from a web form is pasted into a database query, so a visitor can inject their own SQL commands. It is weakness type CWE-89, and a parameterized query fixes it.