SQL injection is an attack in which someone types database commands into a website form or URL so the application runs them. If the site does not validate what it receives, the attacker can read, change or delete information such as customer lists or passwords without having an authorized account.
How TecnetOne handles it: Penetration Testing
SQLi, SQL injection attack, code injection, injection attack