The point of an SQL Injection attack is to compromise a database, which is an organized collection of data and supporting data structures. The data can include user names, passwords, text, etc.

Immortalized by “Little Bobby Drop Tables” in XKCD 327, SQL injection (SQLi) was first discovered in 1998, yet continues to plague web applications across the internet. Even the OWASP Top Ten ...

The sample size for this study was small, only 595 respondents across 16 verticals. However, the problem of SQL Injection isn’t so small; in fact, this problem has existed since 1998.