SQL Injection

A vulnerability where untrusted input is concatenated into a database query so an attacker can alter what the query does. Consequences range from reading or modifying data to executing operating-system commands when the database engine runs with high privilege and exposes file or program features.