This type of attack consists of insertion or "injection" of either a partial or complete SQL query via the data input or transmitted from the client (browser) to the web application. A successful…

This type of attack consists of insertion or "injection" of either a partial or complete SQL query via the data input or transmitted from the client (browser) to the web application. A successful SQL injection attack can: I) Read sensitive data from the database II) Modify database data (insert/update/delete) III) Execute administration operations on the database (such as shutdown the DBMS) IV) Recover the content of a given file existing on the DBMS file system or write into files on file system. V) Issue commands to the operating system