An exploit that takes advantage of database query software that does not thoroughly test the query statement for correctness. Along with cross-site scripting (see XSS), SQL injection is used by worms to break into Web sites and extract data or embed malicious code.
Search For SQL injection On ChannelWeb
Find the latest news and information on SQL injection from across the Channelweb Network of IT Web sites.