An exploit that takes advantage of database query software that does not thoroughly test the query statement for correctness. Along with cross-site scripting (see
XSS), SQL injection is used to break into websites and extract data or embed malicious code. See
buffer overflow.