Immortalized by “Little Bobby Drop Tables” in XKCD 327 ... This was a deliberately simple example, and there are many different SQL injection attack vectors, but all work on the same principle ...

Click the Server Name menu and choose your server from the drop-down list ... on a wildcard expression. In this example, Transact-SQL will create a new table with all columns from the rows ...