A SQL injection attack, then, is when a threat actor uses a SQL query to inject unauthorized code into an application or database — in essence, weaponizing potential user input. Depending on its level ...