Badly written programs (including some websites) will not filter the input data and will apply it directly to the database. There are very simple, well known methods to avoid it but still plenty of ignorant developers (and managers) out there who either don't know or don't take the time (and don't do proper testing to catch this shit).
SQL Injection
Badly written programs (including some websites) will not filter the input data and will apply it directly to the database. There are very simple, well known methods to avoid it but still plenty of ignorant developers (and managers) out there who either don't know or don't take the time (and don't do proper testing to catch this shit).