SQL injection: Injecting malicious code into a server that uses SQL and forcing it to reveal or execute malicious code.