Acronym for SQL Injection—exploiting database queries to access or manipulate data.
SQLi stands for SQL Injection. See 'SQL Injection' for the full definition. Despite being well-understood, SQL injection remains in the OWASP Top 10 because many applications still fail to properly validate input.
Why It Matters
The DSC Perspective:
SQLi is a critical vulnerability class. If you have web applications with database backends, ensure developers follow secure coding practices and conduct regular security testing.