You can use one of two options to insert CSV files: "Bulk Insert," a command that works from the SQL Server Management Studio, or "bcp utility," which you run from a Windows command line prompt.

SQL Injection used to insert a rogue SQL statement into an application, either to perform some back-end server function or bypass application security. The problem for most network administrators is ...