An attacker can inject malicious SQL statements through user-controlled input, allowing...

An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to, modification of, or disclosure of database data.