Glossary: Vulnerability, Asset and Change Management

SQL injection

A flaw where user input is pasted into a database query, so an attacker can change the query. Sam's f-string query had it, while a ? placeholder passes the value safely.