A SQL injection occurs when a malicious user attempts to pass input that changes the final SQL query sent by the web application to the database, enabling the user to perform other unintended SQL queries directly against the database.

SQL

In-Band SQLi

Blind SQLi

Second-order SQL injection

Out-of-band (OOB) SQL injection

Evasion Techniques