An exploit that takes advantage of database query software ... site scripting (see XSS), SQL injection is used to break into websites and extract data or embed malicious code.