SQL Injection

SQL injection is a web application attack, which allows accessing unauthorized information from a database by altering a SQL request.
SQL injections are very dangerous attacks as in most of the cases they lead to full web site compromise. Today they are becoming more and more rare, being replaced by XSS class attacks.
Security Glossary

Security Policy
SQL Injection