SQL Injection is
-
a code injection technique that exploits a security vulnerability occurring in the database layer of an application
-
is a type of computer security vulnerability typically found in web applications that enables malicious attackers to inject client-side script into web pages viewed by other users
-
is a way to allow users to query database using web
-
is a latest way to fight against database security issues
Reveal answer
Fill a bubble to check yourself
A
Correct answer
Explanation
SQL Injection attacks work by inserting malicious SQL code into input fields, which the database then executes. This allows attackers to bypass authentication, retrieve sensitive data, or modify/delete database content. Unlike XSS which targets client-side scripts, SQLi specifically targets the database layer of an application.