SQL injection attack is an insertion of a SQL content in a query using the client input data of a web application.
If the exploit is done, the SQL injection can read data from the database or modify database data and even execute administration operations on the database.