Skip to content
← Back to Glossary
Injection Checked by Vezraa

SQL Injection

An attack where malicious SQL is inserted into queries via unsanitized user input.

SQL injection occurs when user input is concatenated directly into SQL queries. Attackers can manipulate query logic to read, modify, or delete database records. Always use parameterized queries or an ORM to prevent it.

Related Terms

See this vulnerability in the database

See if your app is vulnerable

Vezraa checks for this security issues. Scan in 25 seconds.

SQL Injection — Security Glossary | Vezraa