An attack involving the injection of malicious code into an SQL query sent to the target computer. SQL injection is a common way of compromising Internet resources and applications that use databases. Such attacks are made possible by errors in the interpretation of external calls and can facilitate unauthorized access to data.