Occurs when a bad actor executes a SQL query to the database via the input data from the client to server. If successful, the attacker can read all information stored in the organization’s database, modify the information in any way, and even complete delete the database.