Skip to main content

SQL injection is a security vulnerability allowing an attacker to execute arbitrary SQL statements against a database using a variety of inputs. This includes dynamic SQL statements or SQL statements created in an application by concatenating strings with user input.

SQL injection vulnerabilities are a perennial member of the OWASP Top 10 for which Randall Munroe of XKCD fame has forever memorialized in Little Bobby Tables.

XKCD comic #327 depicting a call from the school to a mom whose child comprised their IT system by changing his name to Robert'); DROP TABLE Students;--